CHANGES revision 712b976a0633806b7140b17354a9398300f616b9
8efcf516f2b6514879fff8d034be55b6d64ff830striker2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
8efcf516f2b6514879fff8d034be55b6d64ff830striker [RT #21871]
71eda8b1c14e4d0adb2f294f22299587cd3d74a9striker2933. [bug] 'dig +nsid' used stack memory after it went out of
aec964227053fab7e59deb26709b94726ce67224rederpj scope. This could potentially result in a unknown,
aec964227053fab7e59deb26709b94726ce67224rederpj potentially malformed, EDNS option being sent instead
aec964227053fab7e59deb26709b94726ce67224rederpj of the desired NSID option. [RT #21781]
1e27f530f81c6058d1a11944ae1e2da45977fc7bjerenkrantz2932. [cleanup] Corrected a numbering error in the "dnssec" test.
469549ac22c6f7b9ecdd9df2565925563e4df84djwoolley2931. [bug] Temporarily and partially disable change 2864
469549ac22c6f7b9ecdd9df2565925563e4df84djwoolley because it would cause inifinite attempts of RRSIG
469549ac22c6f7b9ecdd9df2565925563e4df84djwoolley queries. This is an urgent care fix; we'll
469549ac22c6f7b9ecdd9df2565925563e4df84djwoolley revisit the issue and complete the fix later.
469549ac22c6f7b9ecdd9df2565925563e4df84djwoolley [RT #21710]
7a9f3bef545b0bbc93c2ed758119b0d2e2647c31trawick2930. [experimental] New "rndc addzone" and "rndc delzone" commads
7a9f3bef545b0bbc93c2ed758119b0d2e2647c31trawick allow dynamic addition and deletion of zones.
0be05c658c7e6e5a05fd2d4068d8ac0f030d4752jwoolley To enable this feature, specify a "new-zone-file"
0be05c658c7e6e5a05fd2d4068d8ac0f030d4752jwoolley option at the view or options level in named.conf.
223b367115aefc20f1c32fe2d4e2bfcc4bfe108fjwoolley Zone configuration information for the new zones
223b367115aefc20f1c32fe2d4e2bfcc4bfe108fjwoolley will be written into that file. To make the new
223b367115aefc20f1c32fe2d4e2bfcc4bfe108fjwoolley zones persist after a restart, "include" the file
223b367115aefc20f1c32fe2d4e2bfcc4bfe108fjwoolley into named.conf in the appropriate view. (Note:
223b367115aefc20f1c32fe2d4e2bfcc4bfe108fjwoolley This feature is not yet documented, and its syntax
639cf068707865a81ad2c610e72d57b043d20dd6wrowe is expected to change.) [RT #19447]
639cf068707865a81ad2c610e72d57b043d20dd6wrowe2929. [bug] Improved handling of GSS security contexts:
639cf068707865a81ad2c610e72d57b043d20dd6wrowe - added LRU expiration for generated TSIGs
f3f0c2a5f6009d06350341219d1f38a1644708bcbrianp - added the ability to use a non-default realm
f3f0c2a5f6009d06350341219d1f38a1644708bcbrianp - added new "realm" keyword in nsupdate
f3f0c2a5f6009d06350341219d1f38a1644708bcbrianp - limited lifetime of generated keys to 1 hour
33b095d35c5dac22358ce63c32635ab59ce7cb25aaron or the lifetime of the context (whichever is
33b095d35c5dac22358ce63c32635ab59ce7cb25aaron [RT #19737]
33b095d35c5dac22358ce63c32635ab59ce7cb25aaron2928. [bug] Be more selective about the non-authoritative
100e6f5dec61d108494565f8f3bfa894afadc33ajerenkrantz answer we apply change 2748 to. [RT #21594]
100e6f5dec61d108494565f8f3bfa894afadc33ajerenkrantz2927. [placeholder]
5d5d5ca04c57c7ab865924f4648e8f80de27adfebrianp2926. [placeholder]
4f3ec2ec53c7ca5ca308d85e2e0beb933a2fd0f9aaron2925. [bug] Named failed to accept uncachable negative responses
4f3ec2ec53c7ca5ca308d85e2e0beb933a2fd0f9aaron from insecure zones. [RT# 21555]
4f3ec2ec53c7ca5ca308d85e2e0beb933a2fd0f9aaron2924. [func] 'rndc secroots' dump a combined summary of the
4f3ec2ec53c7ca5ca308d85e2e0beb933a2fd0f9aaron current managed keys combined with trusted keys.
3c0c3ae288166a8736593093c636768702abf263aaron [RT #20904]
3c0c3ae288166a8736593093c636768702abf263aaron2923. [bug] 'dig +trace' could drop core after "connection
b8a843847aae3d9a1838fb8f1de84cd66212f48atrawick timeout". [RT #21514]
c8411888a54dd5dbfd8a5d337ebf0e911a789063trawick2922. [contrib] Update zkt to version 1.0.
c8411888a54dd5dbfd8a5d337ebf0e911a789063trawick2921. [bug] The resolver could attempt to destroy a fetch context
28caffb98f18c0b9562ac20870f7ab91f3d9a01fjerenkrantz too soon. [RT #19878]
28caffb98f18c0b9562ac20870f7ab91f3d9a01fjerenkrantz2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
d757628a07145aa711ba75b4e7c7c01a33133ca1jerenkrantz to IPv4 clients. New acl 'filter-aaaa' (default any).
d757628a07145aa711ba75b4e7c7c01a33133ca1jerenkrantz2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
1585c2979d749ee71edb6a1d57bc9ff6db12a426jerenkrantz2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
6bdb2c094666367615890147775bb18761216c8dminfrin2917. [func] Virtual time test framework. [RT #20801]
c069757188a3cd9ab19b05169b005a824b60b6fcaaron2916. [func] Add framework to use IPv6 in tests.
c069757188a3cd9ab19b05169b005a824b60b6fcaaron fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
c069757188a3cd9ab19b05169b005a824b60b6fcaaron2915. [cleanup] Be smarter about which objects we attempt to compile
c069757188a3cd9ab19b05169b005a824b60b6fcaaron based on configure options. [RT #21444]
11ce97701b22d795fd1a5ec3769a3367bc220921wrowe2914. [bug] Make the "autosign" system test more portable.
11ce97701b22d795fd1a5ec3769a3367bc220921wrowe [RT #20997]
11ce97701b22d795fd1a5ec3769a3367bc220921wrowe2913. [func] Add pkcs#11 system tests. [RT #20784]
e45d7d4ca98387c2898f8302bafb31e3b4f5a5d8jwoolley2912. [func] Windows clients don't like UPDATE responses that clear
6cdd5cd95d8323de5cfb912d8fc0df8c5e3d02cejerenkrantz the zone section. [RT #20986]
239ab9d14d3851c2efc1312b3b42c838073533f4jerenkrantz2911. [bug] dnssec-signzone didn't handle out of zone records well.
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb2910. [func] Sanity check Kerberos credentials. [RT #20986]
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb2909. [bug] named-checkconf -p could die if "update-policy local;"
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb was specified in named.conf. [RT #21416]
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb2908. [bug] It was possible for re-signing to stop after removing
b9cf7102006ac2ccfebcb78174585986ff127ba9jwoolley a DNSKEY. [RT #21384]
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard2907. [bug] The export version of libdns had undefined references.
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard [RT #21444]
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard2905. [port] aix: set use_atomic=yes with native compiler.
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard [RT #21402]
52617e76a53b1d90da027a5311790e1ccef8f60ftrawick2904. [bug] When using DLV, sub-zones of the zones in the DLV,
b584ec31a47334b1253f4a5ad73f023336ab2f28jwoolley could be incorrectly marked as insecure instead of
b584ec31a47334b1253f4a5ad73f023336ab2f28jwoolley secure leading to negative proofs failing. This was
b584ec31a47334b1253f4a5ad73f023336ab2f28jwoolley a unintended outcome from change 2890. [RT# 21392]
b584ec31a47334b1253f4a5ad73f023336ab2f28jwoolley2903. [bug] managed-keys-directory missing from namedconf.c.
7ac88dc1ac207b9a434fd76c0406651d68018d69rederpj [RT #21370]
52617e76a53b1d90da027a5311790e1ccef8f60ftrawick2902. [func] Add regression test for change 2897. [RT #21040]
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantz2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
d157b208942316e96c34fa8b2222ed4cc2e56783trawick2900. [bug] The placeholder negative caching element was not
d157b208942316e96c34fa8b2222ed4cc2e56783trawick properly constructed triggering a INSIST in
d157b208942316e96c34fa8b2222ed4cc2e56783trawick dns_ncache_towire(). [RT #21346]
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick2899. [port] win32: Support linking against OpenSSL 1.0.0.
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick2898. [bug] nslookup leaked memory when -domain=value was
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick specified. [RT #21301]
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick2897. [bug] NSEC3 chains could be left behind when transitioning
68f803c489cf61918fb4e61745fcd1e0cc980541jerenkrantz to insecure. [RT #21040]
68f803c489cf61918fb4e61745fcd1e0cc980541jerenkrantz2896. [bug] "rndc sign" failed to properly update the zone
15405e91bb3fad5a80f7abe828a00b44a3a65bf8jerenkrantz when adding a DNSKEY for publication only. [RT #21045]
15405e91bb3fad5a80f7abe828a00b44a3a65bf8jerenkrantz2895. [func] genrandom: add support for the generation of multiple
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantz files. [RT #20917]
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantz2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
0e2340134f2336b98c92d7f157fb65d0a6f477d4stoddard2893. [bug] Improve managed keys support. New named.conf option
431d6106eaf796cc8dfa8cb0db2b180dd93ed6dftrawick managed-keys-directory. [RT #20924]
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe2892. [bug] Handle REVOKED keys better. [RT #20961]
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe2891. [maint] Update empty-zones list to match
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
5d238058bc748dfa13ff21890ae4a58481e3be89jerenkrantz2890. [bug] Handle the introduction of new trusted-keys and
5d238058bc748dfa13ff21890ae4a58481e3be89jerenkrantz DS, DLV RRsets better. [RT #21097]
9282327b0ffe8981d39835130dfb334af192b508jerenkrantz2889. [bug] Elements of the grammar where not properly reported.
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz2888. [bug] Only the first EDNS option was displayed. [RT #21273]
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz2887. [bug] Report the keytag times in UTC in the .key file,
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz local time is presented as a comment within the
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz comment. [RT #21223]
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz2886. [bug] ctime() is not thread safe. [RT #21223]
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz2885. [bug] Improve -fno-strict-aliasing support probing in
25b812bcab8b61981e288996b991e0ab4d224b92jerenkrantz configure. [RT #21080]
87f0329e30de94828e08d53a99ea23cda86a9fccjerenkrantz2884. [bug] Insufficient valadation in dns_name_getlabelsequence().
0396e75f271f51be57be778655e32ba8d64d240bwrowe2883. [bug] 'dig +short' failed to handle really large datasets.
0396e75f271f51be57be778655e32ba8d64d240bwrowe [RT #21113]
9438d70ce91fa99ec828a2828f0fd45542cd9c4fwrowe2882. [bug] Remove memory context from list of active contexts
0396e75f271f51be57be778655e32ba8d64d240bwrowe before clearing 'magic'. [RT #21274]
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick2881. [bug] Reduce the amount of time the rbtdb write lock
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick is held when closing a version. [RT #21198]
431d6106eaf796cc8dfa8cb0db2b180dd93ed6dftrawick2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
431d6106eaf796cc8dfa8cb0db2b180dd93ed6dftrawick consistent. [RT #21078]
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
a1e8b54f269a8f2388590174174509546e886e60stoddard2878. [func] Incrementally write the master file after performing
a1e8b54f269a8f2388590174174509546e886e60stoddard a AXFR. [RT #21010]
3eb95d6629bb326ae90e5eec693b7e628951751brbb2877. [bug] The validator failed to skip obviously mismatching
109d280c3fcf810e573fc1af5e141ad525c45811bjh RRSIGs. [RT #21138]
109d280c3fcf810e573fc1af5e141ad525c45811bjh2876. [bug] Named could return SERVFAIL for negative responses
61d2cd001754548e90364aa3a7e76863616544b0minfrin from unsigned zones. [RT #21131]
61d2cd001754548e90364aa3a7e76863616544b0minfrin2875. [bug] dns_time64_fromtext() could accept non digits.
61d2cd001754548e90364aa3a7e76863616544b0minfrin [RT #21033]
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron2874. [bug] Cache lack of EDNS support only after the server
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron successfully responds to the query using plain DNS.
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron [RT #20930]
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron2873. [bug] Canceling a dynamic update via the dns/client module
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm could trigger an assertion failure. [RT #21133]
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm2872. [bug] Modify dns/client.c:dns_client_createx() to only
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm require one of IPv4 or IPv6 rather than both.
0506359f47150991eaaae37ca07f94117a9aa63dtrawick [RT #21122]
0506359f47150991eaaae37ca07f94117a9aa63dtrawick2871. [bug] Type mismatch in mem_api.c between the definition and
0506359f47150991eaaae37ca07f94117a9aa63dtrawick the header file, causing build failure with
67f62b7a48ff9eb8d9f31898dceaf9f89280a723dougm --enable-exportlib. [RT #21138]
9d3fdc3bb8077a46851080e17ef9f16c83720c8ftrawick2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
9d3fdc3bb8077a46851080e17ef9f16c83720c8ftrawick2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
219472ea2d5f1563509321d8b8a91b116792bf7adougm [RT #20877]
219472ea2d5f1563509321d8b8a91b116792bf7adougm2868. [cleanup] Run "make clean" at the end of configure to ensure
c048b545f06921f53ceb830b30f99aed7b369d95dougm any changes made by configure are integrated.
c048b545f06921f53ceb830b30f99aed7b369d95dougm Use --with-make-clean=no to disable. [RT #20994]
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm don't like it. [RT #20986]
0ea12b5dcb3d1d399f9bff6f56fb445d80205f9dstriker2866. [bug] Windows does not like the TSIG name being compressed.
0ea12b5dcb3d1d399f9bff6f56fb445d80205f9dstriker [RT #20986]
e93624301705e3dc68992e3b488a764389eb8b98trawick2865. [bug] memset to zero event.data. [RT #20986]
cba0728e3535ee87e89cdb3cb54ce91eda18f6ccaaron2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
cba0728e3535ee87e89cdb3cb54ce91eda18f6ccaaron [RT #21050]
a45de374fb215f294eb1369d4406ac79d6596ee1brianp2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
a45de374fb215f294eb1369d4406ac79d6596ee1brianp [RT #21056]
a45de374fb215f294eb1369d4406ac79d6596ee1brianp2862. [bug] nsupdate didn't default to the parent zone when
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick updating DS records. [RT #20896]
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick2861. [doc] dnssec-settime man pages didn't correctly document the
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick inactivation time. [RT #21039]
a1be7357e2c08b9dfe52c277063d212d65b15feejim2860. [bug] named-checkconf's usage was out of date. [RT #21039]
a1be7357e2c08b9dfe52c277063d212d65b15feejim2859. [bug] When cancelling validation it was possible to leak
a1be7357e2c08b9dfe52c277063d212d65b15feejim memory. [RT #20800]
6682df9b639663c50f447e5690dd62cce7b1c086trawick2858. [bug] RTT estimates were not being adjusted on ICMP errors.
6682df9b639663c50f447e5690dd62cce7b1c086trawick [RT #20772]
51c0f0fe0a49a180389009442a83f74b1916f96atrawick2857. [bug] named-checkconf did not fail on a bad trusted key.
51c0f0fe0a49a180389009442a83f74b1916f96atrawick [RT #20705]
51c0f0fe0a49a180389009442a83f74b1916f96atrawick2856. [bug] The size of a memory allocation was not always properly
51c0f0fe0a49a180389009442a83f74b1916f96atrawick recorded. [RT #20927]
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick2855. [func] nsupdate will now preserve the entered case of domain
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick names in update requests it sends. [RT #20928]
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz2854. [func] dig: allow the final soa record in a axfr response to
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz be suppressed, dig +onesoa. [RT #20929]
60b83cd8f9427809082340cfd7581091990962f5jwoolley2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
60b83cd8f9427809082340cfd7581091990962f5jwoolley2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
e93624301705e3dc68992e3b488a764389eb8b98trawick2851. [doc] nslookup.1, removed <informalexample> from the docbook
e93624301705e3dc68992e3b488a764389eb8b98trawick source as it produced bad nroff. [RT #21007]
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm2850. [bug] If isc_heap_insert() failed due to memory shortage
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb the heap would have corrupted entries. [RT #20951]
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb2849. [bug] Don't treat errors from the xml2 library as fatal.
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb [RT #20945]
4aaf7088758ca56823e585969320f2405a7cc5fcdougm2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
4aaf7088758ca56823e585969320f2405a7cc5fcdougm README.rfc5011 into the ARM. [RT #20899]
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp2846. [bug] EOF on unix domain sockets was not being handled
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx correctly. [RT #20731]
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim2844. [doc] notify-delay default in ARM was wrong. It should have
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim been five (5) seconds.
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley creating key files if there is a chance that the new
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley key ID will collide with an existing one after
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley either of the keys has been revoked. (To override
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley this in the case of dnssec-keyfromlabel, use the -y
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley option. dnssec-keygen will simply create a
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp different, non-colliding key, so an override is
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp not necessary.) [RT #20838]
82630c4a04be47f39298d3284b2c596244fb509bbrianp2842. [func] Added "smartsign" and improved "autosign" and
82630c4a04be47f39298d3284b2c596244fb509bbrianp "dnssec" regression tests. [RT #20865]
35d682920b0b7073bb9ff8c8794f0f73e3ee1a47slive2841. [bug] Change 2836 was not complete. [RT #20883]
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm2840. [bug] Temporary fixed pkcs11-destroy usage check.
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm [RT #20760]
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard2839. [bug] A KSK revoked by named could not be deleted.
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard [RT #20881]
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard2838. [placeholder]
17895aa4b66b8af02d8788b15cb92e1f6a8ecafcwrowe2837. [port] Prevent Linux spurious warnings about fwrite().
983988ac7b8faaf037f4df0ab29729cd047a3ffdtrawick [RT #20812]
7a64b871b8b5e5a427b570e90f0e38e88266c783jim2836. [bug] Keys that were scheduled to become active could
7a64b871b8b5e5a427b570e90f0e38e88266c783jim be delayed. [RT #20874]
7a64b871b8b5e5a427b570e90f0e38e88266c783jim2835. [bug] Key inactivity dates were inadvertently stored in
17895aa4b66b8af02d8788b15cb92e1f6a8ecafcwrowe the private key file with the outdated tag
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz "Unpublish" rather than "Inactive". This has been
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz fixed; however, any existing keys that had Inactive
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz dates set will now need to have them reset, using
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz 'dnssec-settime -I'. [RT #20868]
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz2834. [bug] HMAC-SHA* keys that were longer than the algorithm
5842e6b336b1cc0252b6cc2944dd81c7d3a19a1bbrianp digest length were used incorrectly, leading to
5842e6b336b1cc0252b6cc2944dd81c7d3a19a1bbrianp interoperability problems with other DNS
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin implementations. This has been corrected.
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin (Note: If an oversize key is in use, and
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin compatibility is needed with an older release of
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin BIND, the new tool "isc-hmac-fixup" can convert
c148bc6b4eea544af816783400362f741c5f5fc2trawick the key secret to a form that will work with all
c148bc6b4eea544af816783400362f741c5f5fc2trawick versions.) [RT #20751]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
9d432e23f6025b78322cbee43e8e89262a108e5eaaron [RT #20851]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
9d432e23f6025b78322cbee43e8e89262a108e5eaaron to avoid redefinition in some OSes [RT 20831]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron2831. [security] Do not attempt to validate or cache
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick out-of-bailiwick data returned with a secure
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick answer; it must be re-fetched from its original
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick source and validated in that context. [RT #20819]
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin2830. [bug] Changing the OPTOUT setting could take multiple
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin passes. [RT #20813]
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim2829. [bug] Fixed potential node inconsistency in rbtdb.c.
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim [RT #20808]
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick2828. [security] Cached CNAME or DNAME RR could be returned to clients
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick without DNSSEC validation. [RT #20737]
71f891073f6fa0209870791f64cbbf28d77ffdc1brianp2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
2864362ca8266097928e84f101010bdf814ffa08stoddard2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
2864362ca8266097928e84f101010bdf814ffa08stoddard being released. [RT #20740]
2864362ca8266097928e84f101010bdf814ffa08stoddard2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
2864362ca8266097928e84f101010bdf814ffa08stoddard was in the process of being created was not properly
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick recorded in the zone. [RT #20786]
893c106ae59d8e96d921524b123ae26dea8ad37fgstein2824. [bug] "rndc sign" was not being run by the correct task.
893c106ae59d8e96d921524b123ae26dea8ad37fgstein [RT #20759]
3aa6444bcee4e9fc32ec8860d832ff83a15784efianh2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp2822. [bug] rbtdb.c:loadnode() could return the wrong result.
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp [RT #20802]
b9fe73991e7c592a634242a7e11f924689f58e1fgstein2821. [doc] Add note that named-checkconf doesn't automatically
b9fe73991e7c592a634242a7e11f924689f58e1fgstein2820. [func] Handle read access failure of OpenSSL configuration
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick file more user friendly (PKCS#11 engine patch).
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick [RT #20668]
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick [RT #20771]
81b8d0f83e9d0bc2bf6900fc680737e0cac439a2brianp2818. [cleanup] rndc could return an incorrect error code
b5033962c73a470b6f36a3ac796c542a6ab4ddf6brianp when a zone was not found. [RT #20767]
d7856f850b9b51165f23ae381a891bda894e1373ianh2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
d7856f850b9b51165f23ae381a891bda894e1373ianh [RT #20768]
d7856f850b9b51165f23ae381a891bda894e1373ianh2816. [bug] previous_closest_nsec() could fail to return
d7856f850b9b51165f23ae381a891bda894e1373ianh data for NSEC3 nodes [RT #29730]
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick2815. [bug] Exclusively lock the task when freezing a zone.
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick [RT #19838]
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick2814. [func] Provide a definitive error message when a master
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm zone is not loaded. [RT #20757]
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm2813. [bug] Better handling of unreadable DNSSEC key files.
88ecd979f1112454432371f55a1420240fae3743trawick [RT #20710]
88ecd979f1112454432371f55a1420240fae3743trawick2812. [bug] Make sure updates can't result in a zone with
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick NSEC-only keys and NSEC3 records. [RT 20748]
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
c02a689f2274966ed5d1c16207f74b5128c35c86trawick output. [RT #20733]
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick2810. [doc] Clarified the process of transitioning an NSEC3 zone
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick to insecure. [RT #20746]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard2809. [cleanup] Restored accidentally-deleted text in usage output
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard in dnssec-settime and dnssec-revoke [RT #20739]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard2808. [bug] Remove the attempt to install atomic.h from lib/isc.
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard atomic.h is correctly installed by the architecture
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard specific subdirectories. [RT #20722]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard2807. [bug] Fixed a possible ASSERT when reconfiguring zone
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard keys. [RT #20720]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard --- 9.7.0rc1 released ---
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz when it had changed. [RT #20703]
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz2805. [bug] Fixed namespace problems encountered when building
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz external programs using non-exported BIND9 libraries
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz (i.e., built without --enable-exportlib). [RT #20679]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin2804. [bug] Send notifies when a zone is signed with "rndc sign"
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin or as a result of a scheduled key change. [RT #20700]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin and genrandom under windows. [RT #20670]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin2801. [func] Detect and report records that are different according
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin to DNSSEC but are sematically equal according to plain
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin DNS. Apply plain DNS comparisons rather than DNSSEC
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin comparisons when processing UPDATE requests.
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin dnssec-signzone now removes such semantically duplicate
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin records prior to signing the RRset.
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh named-checkzone -r {ignore|warn|fail} (default warn)
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh named-compilezone -r {ignore|warn|fail} (default warn)
92d311b27a6182c2eed67317990c8c168584ee75trawick named.conf: check-dup-records {ignore|warn|fail};
92d311b27a6182c2eed67317990c8c168584ee75trawick2800. [func] Reject zones which have NS records which refer to
92d311b27a6182c2eed67317990c8c168584ee75trawick CNAMEs, DNAMEs or don't have address record (class IN
92d311b27a6182c2eed67317990c8c168584ee75trawick only). Reject UPDATEs which would cause the zone
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron to fail the above checks if committed. [RT #20678]
6f0dd808a674b7c09a625b36f320030f4e339f8faaron2799. [cleanup] Changed the "secure-to-insecure" option to
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron "dnssec-secure-to-insecure", and "dnskey-ksk-only"
59511de77b389ced52253d055fc470ecfedfcd99aaron to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
59511de77b389ced52253d055fc470ecfedfcd99aaron2798. [bug] Addressed bugs in managed-keys initialization
59511de77b389ced52253d055fc470ecfedfcd99aaron and rollover. [RT #20683]
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz2797. [bug] Don't decrement the dispatch manager's maxbuffers.
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz2796. [bug] Missing dns_rdataset_disassociate() call in
393bfaab1beb2410959a4a5e91f58446f01bac09rbb dns_nsec3_delnsec3sx(). [RT #20681]
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron2795. [cleanup] Add text to differentiate "update with no effect"
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron log messages. [RT #18889]
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron2794. [bug] Install <isc/namespace.h>. [RT #20677]
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron2793. [func] Add "autosign" and "metadata" tests to the
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron automatic tests. [RT #19946]
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh2792. [func] "filter-aaaa-on-v4" can now be set in view
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh options (if compiled in). [RT #20635]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm2791. [bug] The installation of isc-config.sh was broken.
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm [RT #20667]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm2790. [bug] Handle DS queries to stub zones. [RT #20440]
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm2788. [bug] dnssec-signzone could sign with keys that were
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe not requested [RT #20625]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron2787. [bug] Spurious log message when zone keys were
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron dynamically reconfigured. [RT #20659]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron2786. [bug] Additional could be promoted to answer. [RT #20663]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron --- 9.7.0b3 released ---
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron2785. [bug] Revoked keys could fail to self-sign [RT #20652]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron2784. [bug] TC was not always being set when required glue was
9379749d811388a7d0e3410940ddd6743a33d330jim dropped. [RT #20655]
9379749d811388a7d0e3410940ddd6743a33d330jim2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
9379749d811388a7d0e3410940ddd6743a33d330jim buffer size of 512 or less. [RT #20654]
f37499bf7da81cd6b697d4667233137957426428jerenkrantz2782. [port] win32: use getaddrinfo() for hostname lookups.
421dc1d123c9adda60e024f93fb614bfada8b9e5wrowe [RT #20650]
421dc1d123c9adda60e024f93fb614bfada8b9e5wrowe2781. [bug] Inactive keys could be used for signing. [RT #20649]
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron2780. [bug] dnssec-keygen -A none didn't properly unset the
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron activation date in all cases. [RT #20648]
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron2779. [bug] Dynamic key revokation could fail. [RT #20644]
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron2778. [bug] dnssec-signzone could fail when a key was revoked
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley without deleting the unrevoked version. [RT #20638]
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
f37499bf7da81cd6b697d4667233137957426428jerenkrantz2776. [bug] Change #2762 was not correct. [RT #20647]
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp in dnssec-keyfromlabel. [RT #20643]
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp2774. [bug] Existing cache DB wasn't being reused after
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp reconfiguration. [RT #20629]
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe2773. [bug] In autosigned zones, the SOA could be signed
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe with the KSK. [RT #20628]
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe2772. [security] When validating, track whether pending data was from
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe the additional section or not and only return it if
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe validates as secure. [RT #20438]
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron2771. [bug] dnssec-signzone: DNSKEY records could be
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron corrupted when importing from key files [RT #20624]
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron2770. [cleanup] Add log messages to resolver.c to indicate events
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron causing FORMERR responses. [RT #20526]
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron2769. [cleanup] Change #2742 was incomplete. [RT #19589]
29c30db45f6a469017e16b606611e460cc1a1f2caaron2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
095071bbd0b3ccccd6883edc7cd10f13cac71160ianh2767. [bug] named could crash on startup if a zone was
095071bbd0b3ccccd6883edc7cd10f13cac71160ianh configured with auto-dnssec and there was no
095071bbd0b3ccccd6883edc7cd10f13cac71160ianh key-directory. [RT #20615]
a322a82f79b790fb7ddcd7df4459d20725450fa7trawick2766. [bug] isc_socket_fdwatchpoke() should only update the
a322a82f79b790fb7ddcd7df4459d20725450fa7trawick socketmgr state if the socket is not pending on a
21644b4d1b09d0531911a8c9a891819a261480f8minfrin read or write. [RT #20603]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin2765. [bug] Skip masters for which the TSIG key cannot be found.
21644b4d1b09d0531911a8c9a891819a261480f8minfrin [RT #20595]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin2762. [bug] DLV validation failed with a local slave DLV zone.
21644b4d1b09d0531911a8c9a891819a261480f8minfrin [RT #20577]
bf5cf58cc30750e9f9764cc830aff426ced288f9aaron2761. [cleanup] Enable internal symbol table for backtrace only for
bf5cf58cc30750e9f9764cc830aff426ced288f9aaron systems that are known to work. Currently, BSD
bf5cf58cc30750e9f9764cc830aff426ced288f9aaron variants, Linux and Solaris are supported. [RT# 20202]
7cdc36a99b42a3c5e36ac47726ad41c9c7b039ceianh2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
cbfbf9598d686b11afc7a9f9d91a8facfdfa7216trawick2759. [doc] Add information about .jbk/.jnw files to
cbfbf9598d686b11afc7a9f9d91a8facfdfa7216trawick the ARM. [RT #20303]
fe808620434aa59b796e8b60cd6eec65a32dfc2dstoddard2758. [bug] win32: Added a workaround for a windows 2008 bug
e37c657172940f82d9b28a45fc1304140eb0b1d7stoddard that could cause the UDP client handler to shut
edd6c1f4be1aa23fc99134802941397f7f31b3d5jerenkrantz down. [RT #19176]
5f08a022a210f4e511561e89f500621a15e6177dtrawick2757. [bug] dig: assertion failure could occur in connect
6db5333c9461942b8af724b101e687af541d4d4cjerenkrantz timeout. [RT #20599]
d4fcf63a5d9171d50c0d04e05a35ec6bf1f85100jerenkrantz2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
d4fcf63a5d9171d50c0d04e05a35ec6bf1f85100jerenkrantz2755. [placeholder]
dee6a8bde4d598087dc4b3ebf3d4dd06809d2dd7jerenkrantz2754. [bug] Secure-to-insecure transitions failed when zone
dee6a8bde4d598087dc4b3ebf3d4dd06809d2dd7jerenkrantz was signed with NSEC3. [RT #20587]
edd6c1f4be1aa23fc99134802941397f7f31b3d5jerenkrantz2753. [bug] Removed an unnecessary warning that could appear when
edd6c1f4be1aa23fc99134802941397f7f31b3d5jerenkrantz building an NSEC chain. [RT #20589]
d7d551e53cdfb3288eb651447d7209599c40d17estoddard2752. [bug] Locking violation. [RT #20587]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron2750. [bug] dig: assertion failure could occur when a server
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron didn't have an address. [RT #20579]
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron2749. [bug] ixfr-from-differences generated a non-minimal ixfr
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron for NSEC3 signed zones. [RT #20452]
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron2748. [func] Identify bad answers from GTLD servers and treat them
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron as referrals. [RT #18884]
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron2747. [bug] Journal roll forwards failed to set the re-signing
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron time of RRSIGs correctly. [RT #20541]
a4b3fb28f3d2e0983b15b4c6828c6980f2fc9b15jerenkrantz2746. [port] hpux: address signed/unsigned expansion mismatch of
548b2980e83f609186a76e98fb245d02e8547bc3jerenkrantz2745. [bug] configure script didn't probe the return type of
548b2980e83f609186a76e98fb245d02e8547bc3jerenkrantz gai_strerror(3) correctly. [RT #20573]
e54b09d79ca9bc18ea5ae33367fd907473621dcejerenkrantz2744. [func] Log if a query was over TCP. [RT #19961]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz for a insecure delegation.
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz --- 9.7.0b2 released ---
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz2742. [cleanup] Clarify some DNSSEC-related log messages in
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz2741. [func] Allow the dnssec-keygen progress messages to be
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz suppressed (dnssec-keygen -q). Automatically
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz suppress the progress messages when stdin is not
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz a tty. [RT #20474]
3dacbb0a9d24ff7178be1d79846225549719c0c7jerenkrantz2740. [placeholder]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe2739. [cleanup] Clean up API for initializing and clearing trust
1582553026e5e3a1921a34222eaee923fddee9b9wrowe anchors for a view. [RT #20211]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
1582553026e5e3a1921a34222eaee923fddee9b9wrowe test. [RT #20453]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe2737. [func] UPDATE requests can leak existance information.
1582553026e5e3a1921a34222eaee923fddee9b9wrowe [RT #17261]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe2736. [func] Improve the performance of NSEC signed zones with
1582553026e5e3a1921a34222eaee923fddee9b9wrowe more than a normal amount of glue below a delegation.
1582553026e5e3a1921a34222eaee923fddee9b9wrowe [RT #20191]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe2735. [bug] dnssec-signzone could fail to read keys
1582553026e5e3a1921a34222eaee923fddee9b9wrowe that were specified on the command line with
1582553026e5e3a1921a34222eaee923fddee9b9wrowe full paths, but weren't in the current
1582553026e5e3a1921a34222eaee923fddee9b9wrowe directory. [RT #20421]
bd214bbc8d9db9d6d1dcb6b24462e6d1da8e8bbbstoddard2734. [port] cygwin: arpaname did not compile. [RT #20473]
064448ce15afe798e3c1dc0445fe2a30eb256bf6gregames2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
1078b2c97bb39352bae929d2ed3f290a420470a7ianh2732. [func] Add optional filter-aaaa-on-v4 option, available
762c82a23cc3ddaac92f941b2f871e94efdf4e6bgregames if built with './configure --enable-filter-aaaa'.
762c82a23cc3ddaac92f941b2f871e94efdf4e6bgregames Filters out AAAA answers to clients connecting
762c82a23cc3ddaac92f941b2f871e94efdf4e6bgregames via IPv4. (This is NOT recommended for general
fb50cf6056a42f94cc9e8eeabea1eb8d05e0aefcaaron use.) [RT #20339]
fb50cf6056a42f94cc9e8eeabea1eb8d05e0aefcaaron2731. [func] Additional work on change 2709. The key parser
fb50cf6056a42f94cc9e8eeabea1eb8d05e0aefcaaron will now ignore unrecognized fields when the
fb50cf6056a42f94cc9e8eeabea1eb8d05e0aefcaaron minor version number of the private key format
d56c38bfb6293bfff7c980858b19e32039106618jerenkrantz has been increased. It will reject any key with
d56c38bfb6293bfff7c980858b19e32039106618jerenkrantz the major version number increased. [RT #20310]
d56c38bfb6293bfff7c980858b19e32039106618jerenkrantz2730. [func] Have dnssec-keygen display a progress indication
7c301a1818939f85da8f3629cc3e9b5588610ef0jerenkrantz a la 'openssl genrsa' on standard error. Note
7c301a1818939f85da8f3629cc3e9b5588610ef0jerenkrantz when the first '.' is followed by a long stop
7c301a1818939f85da8f3629cc3e9b5588610ef0jerenkrantz one has the choice between slow generation vs.
a7fb6d64e059872d5410e873b7f492d62a5cf916rbb [RT #20284]
a7fb6d64e059872d5410e873b7f492d62a5cf916rbb2729. [func] When constructing a CNAME from a DNAME use the DNAME
a7fb6d64e059872d5410e873b7f492d62a5cf916rbb TTL. [RT #20451]
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick dnssec-signzone now warn immediately if asked to
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick write into a nonexistent directory. [RT #20278]
af262486b3d1c33299307195a715bd1e373f99afrbb2727. [func] The 'key-directory' option can now specify a relative
af262486b3d1c33299307195a715bd1e373f99afrbb path. [RT #20154]
af262486b3d1c33299307195a715bd1e373f99afrbb2726. [func] Added support for SHA-2 DNSSEC algorithms,
af262486b3d1c33299307195a715bd1e373f99afrbb RSASHA256 and RSASHA512. [RT #20023]
628ce9384209a460022be952ccdcc8538ad3ca84slive2725. [doc] Added information about the file "managed-keys.bind"
628ce9384209a460022be952ccdcc8538ad3ca84slive to the ARM. [RT #20235]
628ce9384209a460022be952ccdcc8538ad3ca84slive2724. [bug] Updates to a existing node in secure zone using NSEC
2b9a9a94658c0febcad2f76621b2d5ab856edc6atrawick were failing. [RT #20448]
2b9a9a94658c0febcad2f76621b2d5ab856edc6atrawick2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
2b9a9a94658c0febcad2f76621b2d5ab856edc6atrawick isc_base64_totext(), didn't always mark regions of
f6f453bf03007f391d347dc821e507cdd924d1bftrawick memory as fully consumed after conversion. [RT #20445]
f6f453bf03007f391d347dc821e507cdd924d1bftrawick2722. [bug] Ensure that the memory associated with the name of
f6f453bf03007f391d347dc821e507cdd924d1bftrawick a node in a rbt tree is not altered during the life
f6f453bf03007f391d347dc821e507cdd924d1bftrawick of the node. [RT #20431]
205f4595abf32ae208958d7f8abea68b335c9f39trawick2721. [port] Have dst__entropy_status() prime the random number
205f4595abf32ae208958d7f8abea68b335c9f39trawick generator. [RT #20369]
1078b2c97bb39352bae929d2ed3f290a420470a7ianh2720. [bug] RFC 5011 trust anchor updates could trigger an
1078b2c97bb39352bae929d2ed3f290a420470a7ianh assert if the DNSKEY record was unsigned. [RT #20406]
1078b2c97bb39352bae929d2ed3f290a420470a7ianh2719. [func] Skip trusted/managed keys for unsupported algorithms.
1078b2c97bb39352bae929d2ed3f290a420470a7ianh [RT #20392]
1078b2c97bb39352bae929d2ed3f290a420470a7ianh2718. [bug] The space calculations in opensslrsa_todns() were
b6135e7458bf348c694157b042786562d2b86e18ianh incorrect. [RT #20394]
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron2717. [bug] named failed to update the NSEC/NSEC3 record when
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron the last private type record was removed as a result
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron of completing the signing the zone with a key.
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron [RT #20399]
4224d5789080ea5586d49420da1e1996f5653bb5ianh2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
2d2e3667d789f527a04ce6a0089621470c8143ccmartin --- 9.7.0b1 released ---
2d2e3667d789f527a04ce6a0089621470c8143ccmartin2715. [bug] Require OpenSSL support to be explicitly disabled.
2d2e3667d789f527a04ce6a0089621470c8143ccmartin [RT #20288]
2d2e3667d789f527a04ce6a0089621470c8143ccmartin2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2d2e3667d789f527a04ce6a0089621470c8143ccmartin2713. [bug] powerpc: atomic operations missing asm("ics") /
2d2e3667d789f527a04ce6a0089621470c8143ccmartin __isync() calls.
9b0141308bc27f61d82742c198356975aa6b488abrianp2712. [func] New 'auto-dnssec' zone option allows zone signing
9b0141308bc27f61d82742c198356975aa6b488abrianp to be fully automated in zones configured for
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh dynamic DNS. 'auto-dnssec allow;' permits a zone
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh to be signed by creating keys for it in the
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh key-directory and using 'rndc sign <zone>'.
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh 'auto-dnssec maintain;' allows that too, plus it
22d348febc3c258df246ac93e37945398dbf0348ianh also keeps the zone's DNSSEC keys up to date
22d348febc3c258df246ac93e37945398dbf0348ianh according to their timing metadata. [RT #19943]
62af8654f682ca4913636bae099bec0befab985ctrawick2711. [port] win32: Add the bin/pkcs11 tools into the full
62af8654f682ca4913636bae099bec0befab985ctrawick build. [RT #20372]
62af8654f682ca4913636bae099bec0befab985ctrawick2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron zone option cause a zone to be signed with only KSKs
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron signing the DNSKEY RRset, not ZSKs. This reduces
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron the size of a DNSKEY answer. [RT #20340]
5e98e52df07f59be456af01ebf46d81defef2385trawick2709. [func] Added some data fields, currently unused, to the
5e98e52df07f59be456af01ebf46d81defef2385trawick private key file format, to allow implementation
5e98e52df07f59be456af01ebf46d81defef2385trawick of explicit key rollover in a future release
5e98e52df07f59be456af01ebf46d81defef2385trawick without impairing backward or forward compatibility.
7a95e47ff0d0e4306df0901d56131b49dca5691etrawick [RT #20310]
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron2708. [func] Insecure to secure and NSEC3 parameter changes via
7a95e47ff0d0e4306df0901d56131b49dca5691etrawick update are now fully supported and no longer require
b393bdb2e1eabbe4b9b37c5eaeeeca799b2eb324stoddard defines to enable. We now no longer overload the
b393bdb2e1eabbe4b9b37c5eaeeeca799b2eb324stoddard NSEC3PARAM flag field, nor the NSEC OPT bit at the
b393bdb2e1eabbe4b9b37c5eaeeeca799b2eb324stoddard apex. Secure to insecure changes are controlled by
6f912b4ad14f622aa8d57f887c8c745e13ff6dbfjerenkrantz by the named.conf option 'secure-to-insecure'.
3cd826b00280881e5a2f03d8ec1f8d55802b93dewrowe Warning: If you had previously enabled support by
3cd826b00280881e5a2f03d8ec1f8d55802b93dewrowe adding defines at compile time to BIND 9.6 you should
3cd826b00280881e5a2f03d8ec1f8d55802b93dewrowe ensure that all changes that are in progress have
435c423bdcfa61ff871a9e289d1140f2bac839b8brianp completed prior to upgrading to BIND 9.7. BIND 9.7
435c423bdcfa61ff871a9e289d1140f2bac839b8brianp is not backwards compatible.
435c423bdcfa61ff871a9e289d1140f2bac839b8brianp2707. [func] dnssec-keyfromlabel no longer require engine name
bf9e1eb04f8b0af835d15ac1d0ebcd8a154474cfjerenkrantz to be specified in the label if there is a default
e93cea6246ce30bf9791530a15c56f9e2eecf9cbianh engine or the -E option has been used. Also, it
e93cea6246ce30bf9791530a15c56f9e2eecf9cbianh now uses default algorithms as dnssec-keygen does
f65342c1467751310036d4f9d75f554eaaf01cc6wrowe (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
f65342c1467751310036d4f9d75f554eaaf01cc6wrowe [RT #20371]
960eba6c6d512880c3ed0516f5d15c6e7bc7581ajerenkrantz2706. [bug] Loading a zone with a very large NSEC3 salt could
960eba6c6d512880c3ed0516f5d15c6e7bc7581ajerenkrantz trigger an assert. [RT #20368]
45613d36b9466a48def0498cffa07f48980720f8jerenkrantz2705. [placeholder]
6f912b4ad14f622aa8d57f887c8c745e13ff6dbfjerenkrantz2704. [bug] Serial of dynamic and stub zones could be inconsistent
6f912b4ad14f622aa8d57f887c8c745e13ff6dbfjerenkrantz with their SOA serial. [RT #19387]
1abe6003aeb198cc97263503bceed457a6c2cb4aaaron2703. [func] Introduce an OpenSSL "engine" argument with -E
1abe6003aeb198cc97263503bceed457a6c2cb4aaaron for all binaries which can take benefit of
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh crypto hardware. [RT #20230]
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh2701. [doc] Correction to ARM: hmac-md5 is no longer the only
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh supported TSIG key algorithm. [RT #18046]
3ad5a1fa75e728431fa7b8e3d8a74bcadcd79d4dlars2700. [doc] The match-mapped-addresses option is discouraged.
3ad5a1fa75e728431fa7b8e3d8a74bcadcd79d4dlars [RT #12252]
3fde4c273ea649d1320ec9c51e7d096cd9340a94jerenkrantz2699. [bug] Missing lock in rbtdb.c. [RT #20037]
3fde4c273ea649d1320ec9c51e7d096cd9340a94jerenkrantz2698. [placeholder]
75eee56d2eaac9c27d32fc46b90bb6b1eac85359trawick2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
0dc14774d2c21baf6123fcafdb853af5be1d97edwrowe S_IFREG are defined after including <isc/stat.h>.
0dc14774d2c21baf6123fcafdb853af5be1d97edwrowe [RT #20309]
0dc14774d2c21baf6123fcafdb853af5be1d97edwrowe2696. [bug] named failed to successfully process some valid
9f62694a8b4e2b88994a14555d144b3836b311cfstoddard acl constructs. [RT #20308]
9f62694a8b4e2b88994a14555d144b3836b311cfstoddard2695. [func] DHCP/DDNS - update fdwatch code for use by
9f62694a8b4e2b88994a14555d144b3836b311cfstoddard DHCP. Modify the api to isc_sockfdwatch_t (the
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick callback funciton for isc_socket_fdwatchcreate)
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick to include information about the direction (read
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick or write) and add isc_socket_fdwatchpoke.
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick [RT #20253]
8864d6f5f4744b5d2b638e2a53e2660bcf8b5ab5dougm2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
8864d6f5f4744b5d2b638e2a53e2660bcf8b5ab5dougm [RT #19970]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe2693. [port] Add some noreturn attributes. [RT #20257]
1dfb5e008f35ed13c343b7f6306675e33c399792gstein2692. [port] win32: 32/64 bit cleanups. [RT #20335]
1dfb5e008f35ed13c343b7f6306675e33c399792gstein2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
eadb64379834961679105b7fd4178253fbb9f95dtrawick chain when re-signing a previously-signed zone.
eadb64379834961679105b7fd4178253fbb9f95dtrawick Use -u to modify NSEC3 parameters or switch
eadb64379834961679105b7fd4178253fbb9f95dtrawick between NSEC and NSEC3. [RT #20304]
eadb64379834961679105b7fd4178253fbb9f95dtrawick2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
c7e917aa56886c47bfe061c5e9f603a5aaef0d87trawick [RT #20315]
c7e917aa56886c47bfe061c5e9f603a5aaef0d87trawick2689. [bug] Correctly handle snprintf result. [RT #20306]
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar to decide to fetch the destination address. [RT #20305]
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
6b6083e6518007139257ee449c2af3032d2437d0trawick Also, added warnings when revoking a ZSK, as this is
6b6083e6518007139257ee449c2af3032d2437d0trawick not defined by protocol (but is legal). [RT #19943]
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick2686. [bug] dnssec-signzone should clean the old NSEC chain when
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick signing with NSEC3 and vice versa. [RT #20301]
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
7ef3a1797818c6d25efe8c5fadb5eec3b965a6fabrianp2684. [cleanup] dig: formalize +ad and +cd as synonyms for
7ef3a1797818c6d25efe8c5fadb5eec3b965a6fabrianp +adflag and +cdflag. [RT #19305]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
1e83c8de3aa48b316b28057d53995272baf1260cwrowe the NSEC3 parameters used to sign the zone change.
1e83c8de3aa48b316b28057d53995272baf1260cwrowe [RT #20246]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe2682. [bug] "configure --enable-symtable=all" failed to
1e83c8de3aa48b316b28057d53995272baf1260cwrowe build. [RT #20282]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
1e83c8de3aa48b316b28057d53995272baf1260cwrowe decoded. [RT #20269]
7f683bb300df767164724ebc664f339ac396b434dougm2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
7f683bb300df767164724ebc664f339ac396b434dougm2679. [func] dig -k can now accept TSIG keys in named.conf
7f683bb300df767164724ebc664f339ac396b434dougm format. [RT #20031]
7f683bb300df767164724ebc664f339ac396b434dougm2678. [func] Treat DS queries as if "minimal-response yes;"
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe was set. [RT #20258]
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe2677. [func] Changes to key metadata behavior:
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe - Keys without "publish" or "active" dates set will
4760aa1f19600972cf531ad7da73c1ee5a0225cedougm no longer be used for smart signing. However,
4760aa1f19600972cf531ad7da73c1ee5a0225cedougm those dates will be set to "now" by default when
87a1c79b7b37702a254920ca5214fb282a4fb085dougm a key is created; to generate a key but not use
994c3fbc3335e8fe883b1ce4515efc0c85061cdfaaron it yet, use dnssec-keygen -G.
d5d164b22a2004abed640cb52fc275f00ed92f69jerenkrantz - New "inactive" date (dnssec-keygen/settime -I)
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid sets the time when a key is no longer used for
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid signing but is still published.
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid - The "unpublished" date (-U) is deprecated in
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid favor of "deleted" (-D).
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid [RT #20247]
525508562a53864b78cf8da91ac13be9c072bba7jerenkrantz2676. [bug] --with-export-installdir should have been
525508562a53864b78cf8da91ac13be9c072bba7jerenkrantz --with-export-includedir. [RT #20252]
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick2675. [bug] dnssec-signzone could crash if the key directory
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick did not exist. [RT #20232]
f04ad0ba7fe0eea5ea7a92f852cef75747ab2090trawick --- 9.7.0a3 released ---
f04ad0ba7fe0eea5ea7a92f852cef75747ab2090trawick2674. [bug] "dnssec-lookaside auto;" crashed if named was built
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick without openssl. [RT #20231]
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick2673. [bug] The managed-keys.bind zone file could fail to
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick load due to a spurious result from sync_keyzone()
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick [RT #20045]
d5d164b22a2004abed640cb52fc275f00ed92f69jerenkrantz2672. [bug] Don't enable searching in 'host' when doing reverse
d5d164b22a2004abed640cb52fc275f00ed92f69jerenkrantz lookups. [RT #20218]
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard2671. [bug] Add support for PKCS#11 providers not returning
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard the public exponent in RSA private keys
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard (OpenCryptoki for instance) in
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard dnssec-keyfromlabel. [RT #19294]
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard2670. [bug] Unexpected connect failures failed to log enough
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard information to be useful. [RT #20205]
a21148678a1459064627d917a66669e7e8d140e6stoddard2669. [func] Update PKCS#11 support to support Keyper HSM.
910df8b3f50a0515b430b999d4750de94c509f2atrawick Update PKCS#11 patch to be against openssl-0.9.8i.
c6a9d49433c9ba5b18b26c3d764f1bbcb9746090wrowe2668. [func] Several improvements to dnssec-* tools, including:
c6a9d49433c9ba5b18b26c3d764f1bbcb9746090wrowe - dnssec-keygen and dnssec-settime can now set key
51be7fc538641ed7cb22e959eb31629f7183f70fianh metadata fields 0 (to unset a value, use "none")
51be7fc538641ed7cb22e959eb31629f7183f70fianh - dnssec-revoke sets the revocation date in
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe addition to the revoke bit
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe - dnssec-settime can now print individual metadata
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe fields instead of always printing all of them,
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe and can print them in unix epoch time format for
decd0c23bb26f6662f4b963cf86ee569613bffeagregames use by scripts
decd0c23bb26f6662f4b963cf86ee569613bffeagregames [RT #19942]
e1753aabf5df187b5b04e72a958af4b65b1a125daaron2667. [func] Add support for logging stack backtrace on assertion
e1753aabf5df187b5b04e72a958af4b65b1a125daaron failure (not available for all platforms). [RT #19780]
e1753aabf5df187b5b04e72a958af4b65b1a125daaron2666. [func] Added an 'options' argument to dns_name_fromstring()
e1753aabf5df187b5b04e72a958af4b65b1a125daaron (API change from 9.7.0a2). [RT #20196]
e1753aabf5df187b5b04e72a958af4b65b1a125daaron2665. [func] Clarify syntax for managed-keys {} statement, add
e57f991fe2b9a4c080cd50ca913a2a5693b096b5aaron ARM documentation about RFC 5011 support. [RT #19874]
e57f991fe2b9a4c080cd50ca913a2a5693b096b5aaron2664. [bug] create_keydata() and minimal_update() in zone.c
924c8dd40352ca7775704a31a7a77ab86dc951b4ianh didn't properly check return values for some
924c8dd40352ca7775704a31a7a77ab86dc951b4ianh functions. [RT #19956]
910df8b3f50a0515b430b999d4750de94c509f2atrawick2663. [func] win32: allow named to run as a service using
910df8b3f50a0515b430b999d4750de94c509f2atrawick "NT AUTHORITY\LocalService" as the account. [RT #19977]
0d628dd174dd6de13463b10d2599f6cac24e9fe8brianp2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
0d628dd174dd6de13463b10d2599f6cac24e9fe8brianp returned a misleading error code when lwresd was
0d628dd174dd6de13463b10d2599f6cac24e9fe8brianp down. [RT #20028]
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp creating lwres context. [RT #20029]
7bf77d70b6830636bc36e6b76a228c301be23ff7brianp2660. [func] Add a new set of DNS libraries for non-BIND9
7bf77d70b6830636bc36e6b76a228c301be23ff7brianp applications. See README.libdns. [RT #19369]
185b73b1f914e5d8f99f31225cc656b882dcbf73ianh2659. [doc] Clarify dnssec-keygen doc: key name must match zone
6ef713e25735887d4a59a879b97a68bd575ecb92trawick name for DNSSEC keys. [RT #19938]
cef5cb47e2ea4c174c01762d4430613db0f41e5cstoddard2658. [bug] dnssec-settime and dnssec-revoke didn't process
cef5cb47e2ea4c174c01762d4430613db0f41e5cstoddard key file paths correctly. [RT #20078]
8abd60101b9794e224795ccf68b8ba984efbc94astoddard2657. [cleanup] Lower "journal file <path> does not exist, creating it"
8abd60101b9794e224795ccf68b8ba984efbc94astoddard log level to debug 1. [RT #20058]
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick2656. [func] win32: add a "tools only" check box to the installer
6ef713e25735887d4a59a879b97a68bd575ecb92trawick which causes it to only install dig, host, nslookup,
6ef713e25735887d4a59a879b97a68bd575ecb92trawick nsupdate and relevant DLLs. [RT #19998]
26d590c0e5338f66ca1aad6f925374843fac5121stoddard2655. [doc] Document that key-directory does not affect
26d590c0e5338f66ca1aad6f925374843fac5121stoddard2654. [bug] Improve error reporting on duplicated names for
26d590c0e5338f66ca1aad6f925374843fac5121stoddard deny-answer-xxx. [RT #20164]
d472f67198d6b15dd1270136f180cca9c9263243trawick2653. [bug] Treat ENGINE_load_private_key() failures as key
d472f67198d6b15dd1270136f180cca9c9263243trawick not found rather than out of memory. [RT #18033]
d472f67198d6b15dd1270136f180cca9c9263243trawick2652. [func] Provide more detail about what record is being
d472f67198d6b15dd1270136f180cca9c9263243trawick deleted. [RT #20061]
d472f67198d6b15dd1270136f180cca9c9263243trawick2651. [bug] Dates could print incorrectly in K*.key files on
a3bb95a3600153c7f09f62749e32093658943c32brianp 64-bit systems. [RT #20076]
a3bb95a3600153c7f09f62749e32093658943c32brianp2650. [bug] Assertion failure in dnssec-signzone when trying
b760518cc17e7124ba546ed63063603f1ab82a40aaron to read keyset-* files. [RT #20075]
b760518cc17e7124ba546ed63063603f1ab82a40aaron2649. [bug] Set the domain for forward only zones. [RT #19944]
b760518cc17e7124ba546ed63063603f1ab82a40aaron2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
b760518cc17e7124ba546ed63063603f1ab82a40aaron2647. [bug] Remove unnecessary SOA updates when a new KSK is
b760518cc17e7124ba546ed63063603f1ab82a40aaron added. [RT #19913]
23d8f62856c1531526042e1c5edf44557cadd2e5trawick2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
705c8ed3ef608706c91ca12483d7b54ff9007cc9jerenkrantz2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
705c8ed3ef608706c91ca12483d7b54ff9007cc9jerenkrantz which default to 64 bits. [RT #19927]
ef154948c97c53cdc1ad5329cb83c32ad26cf416aaron --- 9.7.0a2 released ---
ef154948c97c53cdc1ad5329cb83c32ad26cf416aaron2644. [bug] Change #2628 caused a regression on some systems;
c6741d11357aace4c9ba39535d3cb2d751f46114trawick named was unable to write the PID file and would
c6741d11357aace4c9ba39535d3cb2d751f46114trawick fail on startup. [RT #20001]
c6741d11357aace4c9ba39535d3cb2d751f46114trawick2643. [bug] Stub zones interacted badly with NSEC3 support.
7230f1eb017a35b7d20e0e9ec0d234766f2a732dtrawick [RT #19777]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick2642. [bug] nsupdate could dump core on solaris when reading
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick improperly formatted key files. [RT #20015]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick2641. [bug] Fixed an error in parsing update-policy syntax,
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick added a regression test to check it. [RT #20007]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick2640. [security] A specially crafted update packet will cause named
6b477c0a238733ca8fd156629310513d29dc7e02trawick to exit. [RT #20000]
6b477c0a238733ca8fd156629310513d29dc7e02trawick2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
2b31ac2c6342d2afcf67b7b0f08c928a87f98c74wrowe2638. [bug] Install arpaname. [RT #19957]
557eb8d48357657fa898250560f089c65539c634gregames2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
557eb8d48357657fa898250560f089c65539c634gregames [RT #19959]
adb8c5e5291be5943122bbff404bc1018c79d555ianh2636. [func] Simplify zone signing and key maintenance with the
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick dnssec-* tools. Major changes:
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick - all dnssec-* tools now take a -K option to
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick specify a directory in which key files will be
51ced3b28ef430a96586284d4320f7dbdaf7225ebrianp - DNSSEC can now store metadata indicating when
51ced3b28ef430a96586284d4320f7dbdaf7225ebrianp they are scheduled to be published, activated,
51ced3b28ef430a96586284d4320f7dbdaf7225ebrianp revoked or removed; these values can be set by
a222035458f89e2db231450ba6d5fae8052da5f5aaron dnssec-keygen or overwritten by the new
a222035458f89e2db231450ba6d5fae8052da5f5aaron dnssec-settime command
a222035458f89e2db231450ba6d5fae8052da5f5aaron - dnssec-signzone -S (for "smart") option reads key
a222035458f89e2db231450ba6d5fae8052da5f5aaron metadata and uses it to determine automatically
4a872628ca5bf20847f442a625c255b643120db0wrowe which keys to publish to the zone, use for
4a872628ca5bf20847f442a625c255b643120db0wrowe signing, revoke, or remove from the zone
4a872628ca5bf20847f442a625c255b643120db0wrowe [RT #19816]
74528257888620220641cd28366731539a37e1f3ianh2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
74528257888620220641cd28366731539a37e1f3ianh [RT #19716]
0632de713e41fa3aa928a1777677b0d79843ae2bdougm2634. [port] win32: Add support for libxml2, enable
0cc82c261350ab8dc8a9992cad7197c4d22d597eianh statschannel. [RT #19773]
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp2633. [bug] Handle 15 bit rand() functions. [RT #19783]
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp2632. [func] util/kit.sh: warn if documentation appears to be out of
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp date. [RT #19922]
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb [RT #19926 ]
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb2630. [func] Improved syntax for DDNS autoconfiguration: use
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb "update-policy local;" to switch on local DDNS in a
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb zone. (The "ddns-autoconf" option has been removed.)
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb [RT #19875]
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb2629. [port] Check for seteuid()/setegid(), use setresuid()/
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb setresgid() if not present. [RT #19932]
f9f506f0686ad065b4c6fe14dd962cdd478350dbianh2628. [port] linux: Allow /var/run/named/named.pid to be opened
f9f506f0686ad065b4c6fe14dd962cdd478350dbianh at startup with reduced capabilities in operation.
f9f506f0686ad065b4c6fe14dd962cdd478350dbianh [RT #19884]
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh2627. [bug] Named aborted if the same key was included in
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh trusted-keys more than once. [RT #19918]
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh2626. [bug] Multiple trusted-keys could trigger an assertion
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron failure. [RT #19914]
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
9ca934cec0a1cc3c425fde5dc51956bce6cd3183brianp2624. [func] 'named-checkconf -p' will print out the parsed
9ca934cec0a1cc3c425fde5dc51956bce6cd3183brianp configuration. [RT #18871]
0cdca1e056a05a09fe16fe736abcf79969c9767ejerenkrantz2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
0cdca1e056a05a09fe16fe736abcf79969c9767ejerenkrantz2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick2621. [doc] Made copyright boilterplate consistent. [RT #19833]
0a2d57d962bef3a8898723925b3fb02d2e836994dougm2620. [bug] Delay thawing the zone until the reload of it has
0a2d57d962bef3a8898723925b3fb02d2e836994dougm completed successfully. [RT #19750]
06461d67f387ea068187e6dfa036875a8205c04cjerenkrantz2619. [func] Add support for RFC 5011, automatic trust anchor
06461d67f387ea068187e6dfa036875a8205c04cjerenkrantz maintenance. The new "managed-keys" statement can
900127764fb985c340ee4979cac97146a330c694trawick be used in place of "trusted-keys" for zones which
900127764fb985c340ee4979cac97146a330c694trawick support this protocol. (Note: this syntax is
1a6a0072a95887164091e366ba0e89c2b39a954abrianp expected to change prior to 9.7.0 final.) [RT #19248]
1a6a0072a95887164091e366ba0e89c2b39a954abrianp2618. [bug] The sdb and sdlz db_interator_seek() methods could
6f4c27ba6e152792f3729069e8d8313ebc87cc60jwoolley loop infinitely. [RT #19847]
6f4c27ba6e152792f3729069e8d8313ebc87cc60jwoolley2617. [bug] ifconfig.sh failed to emit an error message when
23ce412bd50a47accab4dd26019b78810bbf46ebtrawick run from the wrong location. [RT #19375]
23ce412bd50a47accab4dd26019b78810bbf46ebtrawick2616. [bug] 'host' used the nameservers from resolv.conf even
6865813dee5d3c1ebf12dd810368171792a0190atrawick when a explicit nameserver was specified. [RT #19852]
6865813dee5d3c1ebf12dd810368171792a0190atrawick2615. [bug] "__attribute__((unused))" was in the wrong place
97719ad970d779ac48af9364ab0ea9fdcc27470ajwoolley for ia64 gcc builds. [RT #19854]
97719ad970d779ac48af9364ab0ea9fdcc27470ajwoolley2614. [port] win32: 'named -v' should automatically be executed
5ad238c42b1e159ee8f164515e0c4ee6c727c2fdtrawick in the foreground. [RT #19844]
5ad238c42b1e159ee8f164515e0c4ee6c727c2fdtrawick2613. [placeholder]
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb --- 9.7.0a1 released ---
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb2612. [func] Add default values for the arguments to
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb dnssec-keygen. Without arguments, it will now
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb generate a 1024-bit RSASHA1 zone-signing key,
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb or with the -f KSK option, a 2048-bit RSASHA1
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb key-signing key. [RT #19300]
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb2611. [func] Add -l option to dnssec-dsfromkey to generate
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb DLV records instead of DS records. [RT #19300]
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb2610. [port] sunos: Change #2363 was not complete. [RT #19796]
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley2609. [func] Simplify the configuration of dynamic zones:
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley - add ddns-confgen command to generate
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley configuration text for named.conf
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley - add zone option "ddns-autoconf yes;", which
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley causes named to generate a TSIG session key
1c0b7c3bdace07946457fa7ba04b7f97b6599792rbb and allow updates to the zone using that key
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley - add '-l' (localhost) option to nsupdate, which
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley causes nsupdate to connect to a locally-running
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley named process using the session key generated
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley [RT #19284]
1c0b7c3bdace07946457fa7ba04b7f97b6599792rbb2608. [func] Perform post signing verification checks in
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz dnssec-signzone. These can be disabled with -P.
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz The post sign verification test ensures that for each
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz algorithm in use there is at least one non revoked
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz self signed KSK key. That all revoked KSK keys are
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb self signed. That all records in the zone are signed
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb by the algorithm. [RT #19653]
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb2607. [bug] named could incorrectly delete NSEC3 records for
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb empty nodes when processing a update request.
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb [RT #19749]
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb2606. [bug] "delegation-only" was not being accepted in
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick delegation-only type zones. [RT #19717]
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick2605. [bug] Accept DS responses from delegation only zones.
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick [RT # 19296]
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames2604. [func] Add support for DNS rebinding attack prevention through
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames new options, deny-answer-addresses and
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames deny-answer-aliases. Based on contributed code from
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames JD Nurmi, Google. [RT #18192]
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames2603. [port] win32: handle .exe extension of named-checkzone and
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames named-comilezone argv[0] names under windows.
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames [RT #19767]
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames2602. [port] win32: fix debugging command line build of libisccfg.
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames [RT #19767]
f99bffd6087564cf9c05cc29d1c6b38d94e0ed30gregames2601. [doc] Mention file creation mode mask in the
270609308f247c5e934b400b5f1691c2cca16c61jerenkrantz named manual page.
270609308f247c5e934b400b5f1691c2cca16c61jerenkrantz2600. [doc] ARM: miscellaneous reformatting for different
8458877c9ba0af86acd590eea531476adde3d02dmartin page widths. [RT #19574]
8458877c9ba0af86acd590eea531476adde3d02dmartin2599. [bug] Address rapid memory growth when validation fails.
8458877c9ba0af86acd590eea531476adde3d02dmartin [RT #19654]
644be6f54749d2d9950d2c4d2ac448f7af016d26martin2598. [func] Reserve the -F flag. [RT #19657]
644be6f54749d2d9950d2c4d2ac448f7af016d26martin2597. [bug] Handle a validation failure with a insecure delegation
644be6f54749d2d9950d2c4d2ac448f7af016d26martin from a NSEC3 signed master/slave zone. [RT #19464]
b30b04f639d479b96cc08c43ffa34c92ba275676ianh2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
b30b04f639d479b96cc08c43ffa34c92ba275676ianh long, leading to inefficient memory usage or rejecting
b30b04f639d479b96cc08c43ffa34c92ba275676ianh newer cache entries in the worst case. [RT #19563]
c4fbc4018fd2b6716673a38ee27eeb36cba41c5djwoolley2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
c4fbc4018fd2b6716673a38ee27eeb36cba41c5djwoolley2594. [func] Have rndc warn if using its default configuration
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe file when the key file also exists. [RT #19424]
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
2548497d480c4f3e9b3fe14711bd510aa2157434gregames2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
ccb5c3af2d491a7cd1c246cd23f0fb083da417fagregames2591. [bug] named could die when processing a update in
0e58e92812f2f679d6bf2ff66cbcfa6c1d1e14bbjerenkrantz removed_orphaned_ds(). [RT #19507]
da6e93dca0222159650783802e23172e3160605egregames2590. [func] Report zone/class of "update with no effect".
da6e93dca0222159650783802e23172e3160605egregames [RT #19542]
c927e13f298c42251296d33cc1fa3eb8232b843daaron2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
c927e13f298c42251296d33cc1fa3eb8232b843daaron [RT #19626]
c927e13f298c42251296d33cc1fa3eb8232b843daaron2588. [bug] SO_REUSEADDR could be set unconditionally after failure
9126ed10455a2a98a3a51c68ed1b356e1873e8e6aaron of bind(2) call. This should be rare and mostly
9126ed10455a2a98a3a51c68ed1b356e1873e8e6aaron harmless, but may cause interference with other
9126ed10455a2a98a3a51c68ed1b356e1873e8e6aaron processes that happen to use the same port. [RT #19642]
fa3ca21e09bac0dbc2045e9f53963ba46cfed5b1trawick2587. [func] Improve logging by reporting serial numbers for
fa3ca21e09bac0dbc2045e9f53963ba46cfed5b1trawick when zone serial has gone backwards or unchanged.
fa3ca21e09bac0dbc2045e9f53963ba46cfed5b1trawick [RT #19506]
18acb2c0df442ead1d075a1a2207cbb197725b14coar2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
18acb2c0df442ead1d075a1a2207cbb197725b14coar or SDB. [RT #19577]
18acb2c0df442ead1d075a1a2207cbb197725b14coar2585. [bug] Uninitialized socket name could be referenced via a
617f972690d850a52cd4e9ef2f32d356e0fae715aaron statistics channel, triggering an assertion failure in
617f972690d850a52cd4e9ef2f32d356e0fae715aaron XML rendering. [RT #19427]
617f972690d850a52cd4e9ef2f32d356e0fae715aaron2584. [bug] alpha: gcc optimization could break atomic operations.
617f972690d850a52cd4e9ef2f32d356e0fae715aaron [RT #19227]
9278d5393ef084f4fc6d7ec8641af5959442c157jwoolley2583. [port] netbsd: provide a control to not add the compile
9278d5393ef084f4fc6d7ec8641af5959442c157jwoolley date to the version string, -DNO_VERSION_DATE.
022cff78006f698453640e0a0e97cc5f8c9de59drbb2582. [bug] Don't emit warning log message when we attempt to
022cff78006f698453640e0a0e97cc5f8c9de59drbb remove non-existent journal. [RT #19516]
526a776292f420ffeea0d081c61971ed381fad20stoddard2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
526a776292f420ffeea0d081c61971ed381fad20stoddard Requires MySQL 5.0.19 or later. [RT #19084]
526a776292f420ffeea0d081c61971ed381fad20stoddard2580. [bug] UpdateRej statistics counter could be incremented twice
526a776292f420ffeea0d081c61971ed381fad20stoddard for one rejection. [RT #19476]
526a776292f420ffeea0d081c61971ed381fad20stoddard2579. [bug] DNSSEC lookaside validation failed to handle unknown
526a776292f420ffeea0d081c61971ed381fad20stoddard algorithms. [RT #19479]
526a776292f420ffeea0d081c61971ed381fad20stoddard2578. [bug] Changed default sig-signing-type to 65534, because
526a776292f420ffeea0d081c61971ed381fad20stoddard 65535 turns out to be reserved. [RT #19477]
62ddc9851530478919d169ba9c34b80f60cf7718trawick2577. [doc] Clarified some statistics counters. [RT #19454]
62ddc9851530478919d169ba9c34b80f60cf7718trawick2576. [bug] NSEC record were not being correctly signed when
62ddc9851530478919d169ba9c34b80f60cf7718trawick a zone transitions from insecure to secure.
62ddc9851530478919d169ba9c34b80f60cf7718trawick Handle such incorrectly signed zones. [RT #19114]
904d7bf799c6216beb34519463596b4fce630308wrowe2575. [func] New functions dns_name_fromstring() and
904d7bf799c6216beb34519463596b4fce630308wrowe dns_name_tostring(), to simplify conversion
904d7bf799c6216beb34519463596b4fce630308wrowe of a string to a dns_name structure and vice
904d7bf799c6216beb34519463596b4fce630308wrowe versa. [RT #19451]
904d7bf799c6216beb34519463596b4fce630308wrowe2574. [doc] Document nsupdate -g and -o. [RT #19351]
904d7bf799c6216beb34519463596b4fce630308wrowe2573. [bug] Replacing a non-CNAME record with a CNAME record in a
17a4c6968b2fa692ff4dde12fe305230ee6b0421aaron single transaction in a signed zone failed. [RT #19397]
17a4c6968b2fa692ff4dde12fe305230ee6b0421aaron2572. [func] Simplify DLV configuration, with a new option
17a4c6968b2fa692ff4dde12fe305230ee6b0421aaron "dnssec-lookaside auto;" This is the equivalent
83b031099aa3dc8a5fd2f708e397818cbd16c9aajerenkrantz of "dnssec-lookaside . trust-anchor dlv.isc.org;"
83b031099aa3dc8a5fd2f708e397818cbd16c9aajerenkrantz plus setting a trusted-key for dlv.isc.org.
01e77cadbd9ad4962993380245bcc033dde523e4rbb Note: The trusted key is hard-coded into named,
01e77cadbd9ad4962993380245bcc033dde523e4rbb but is also stored in (and can be overridden
01e77cadbd9ad4962993380245bcc033dde523e4rbb by) $sysconfdir/bind.keys. As the ISC DLV key
8ea9794272347cfdd92861f46295406649f01afatrawick rolls over it can be kept up to date by replacing
8ea9794272347cfdd92861f46295406649f01afatrawick the bind.keys file with a key downloaded from
b900452c9c36031434d318880f023c0fb9143325rbb2571. [func] Add a new tool "arpaname" which translates IP addresses
b900452c9c36031434d318880f023c0fb9143325rbb [RT #18976]
b900452c9c36031434d318880f023c0fb9143325rbb2570. [func] Log the destination address the query was sent to.
b900452c9c36031434d318880f023c0fb9143325rbb [RT #19209]
b900452c9c36031434d318880f023c0fb9143325rbb2569. [func] Move journalprint, nsec3hash, and genrandom
43053faf24ffe7657bb32bc06d4058dedf3ef053rbb "make install" will put them in $sbindir. [RT #19301]
c453a141db60a5b19649eac508f4851a8729c556rbb2568. [bug] Report when the write to indicate a otherwise
c453a141db60a5b19649eac508f4851a8729c556rbb successful start fails. [RT #19360]
8b91dcac0e1ef7796c72d16b0962267313cac486jerenkrantz2567. [bug] dst__privstruct_writefile() could miss write errors.
8b91dcac0e1ef7796c72d16b0962267313cac486jerenkrantz write_public_key() could miss write errors.
8b91dcac0e1ef7796c72d16b0962267313cac486jerenkrantz dnssec-dsfromkey could miss write errors.
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe [RT #19360]
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe2566. [cleanup] Clarify logged message when an insecure DNSSEC
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe response arrives from a zone thought to be secure:
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe "insecurity proof failed" instead of "not
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe insecure". [RT #19400]
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe2565. [func] Add support for HIP record. Includes new functions
7dfed2b71c9c4223996cbd7c5c0c85c7c8fef2a4rbb dns_rdata_hip_first(), dns_rdata_hip_next()
7dfed2b71c9c4223996cbd7c5c0c85c7c8fef2a4rbb and dns_rdata_hip_current(). [RT #19384]
7dfed2b71c9c4223996cbd7c5c0c85c7c8fef2a4rbb2564. [bug] Only take EDNS fallback steps when processing timeouts.
574f6ff9ee80ef4f772649c5c8319b764a8abe42jerenkrantz2563. [bug] Dig could leak a socket causing it to wait forever
6d7d70dbda8e461d87f2d41e323755496ae3ebc7trawick to exit. [RT #19359]
6d7d70dbda8e461d87f2d41e323755496ae3ebc7trawick2562. [doc] ARM: miscellaneous improvements, reorganization,
22a25f3393393b781e214f4abef17950bcb8bbe3jerenkrantz and some new content.
22a25f3393393b781e214f4abef17950bcb8bbe3jerenkrantz2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe2559. [bug] dnssec-dsfromkey could compute bad DS records when
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe reading from a K* files. [RT #19357]
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe2558. [func] Set the ownership of missing directories created
8bda0627eb2aca9e678c1303a0423d33069388dfwrowe for pid-file if -u has been specified on the command
de63b1eeff87cd19cf42bb83cca85381026965ddjerenkrantz line. [RT #19328]
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb2557. [cleanup] PCI compliance:
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb * new libisc log module file
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb * isc_dir_chroot() now also changes the working
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb directory to "/".
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb * additional INSISTs
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb * additional logging when files can't be removed.
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb error checks in the correct order resulting in the
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb wrong error code sometimes being returned. [RT #19249]
52df98b165194a0ad68885f49f81fdaf56ece568wrowe2555. [func] dig: when emitting a hex dump also display the
52df98b165194a0ad68885f49f81fdaf56ece568wrowe corresponding characters. [RT #19258]
2c294c31addd5c957bafe6e78c4a30d423ad6e80rbb2554. [bug] Validation of uppercase queries from NSEC3 zones could
2c294c31addd5c957bafe6e78c4a30d423ad6e80rbb fail. [RT #19297]
2c294c31addd5c957bafe6e78c4a30d423ad6e80rbb2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
7e44dd5082cd865068285e8f915bb5f045e0bb80lars2552. [bug] zero-no-soa-ttl-cache was not being honoured.
7e44dd5082cd865068285e8f915bb5f045e0bb80lars [RT #19340]
44a4ee1140769173da7bc2b42d1a686e3260ad84wrowe2551. [bug] Potential Reference leak on return. [RT #19341]
44a4ee1140769173da7bc2b42d1a686e3260ad84wrowe2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
44a4ee1140769173da7bc2b42d1a686e3260ad84wrowe [RT #19343]
e379fc6d7f79163700290d92ce75deb4f3005301jerenkrantz2549. [port] linux: define NR_OPEN if not currently defined.
978faa9e29e0f0c42e66c07240e562325a4717b0jerenkrantz2548. [bug] Install iterated_hash.h. [RT #19335]
978faa9e29e0f0c42e66c07240e562325a4717b0jerenkrantz2547. [bug] openssl_link.c:mem_realloc() could reference an
978faa9e29e0f0c42e66c07240e562325a4717b0jerenkrantz out-of-range area of the source buffer. New public
976501adbc040220270f7d1d77c4b8373033be69wrowe function isc_mem_reallocate() was introduced to address
976501adbc040220270f7d1d77c4b8373033be69wrowe this bug. [RT #19313]
976501adbc040220270f7d1d77c4b8373033be69wrowe2546. [func] Add --enable-openssl-hash configure flag to use
976501adbc040220270f7d1d77c4b8373033be69wrowe OpenSSL (in place of internal routine) for hash
976501adbc040220270f7d1d77c4b8373033be69wrowe functions (MD5, SHA[12] and HMAC). [RT #18815]
10a00688adcf1df367b1243810beedaabe6b1abeminfrin2545. [doc] ARM: Legal hostname checking (check-names) is
10a00688adcf1df367b1243810beedaabe6b1abeminfrin for SRV RDATA too. [RT #19304]
8a3a703eae0e35f674b189181609545c6fc77a09rbb2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
8a3a703eae0e35f674b189181609545c6fc77a09rbb2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
9af1ccb223d0669b3c3a43eed070d815afde9084mjc2542. [doc] Update the description of dig +adflag. [RT #19290]
9d41fafe32b324c197f25224207fc6ce34f085bfrbb2541. [bug] Conditionally update dispatch manager statistics.
9d41fafe32b324c197f25224207fc6ce34f085bfrbb [RT #19247]
9d41fafe32b324c197f25224207fc6ce34f085bfrbb2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
889d9c84f8b1ad850f977a6d8e548696994f8f86jerenkrantz2539. [security] Update the interaction between recursion, allow-query,
889d9c84f8b1ad850f977a6d8e548696994f8f86jerenkrantz allow-query-cache and allow-recursion. [RT #19198]
8c83461e53ca7d204e1d634f0c78199d60320d7bjerenkrantz2538. [bug] cache/ADB memory could grow over max-cache-size,
8c83461e53ca7d204e1d634f0c78199d60320d7bjerenkrantz especially with threads and smaller max-cache-size
8c83461e53ca7d204e1d634f0c78199d60320d7bjerenkrantz values. [RT #19240]
8e5842bc05146bb5c171e53b00b24063d17c666cjerenkrantz2537. [func] Added more statistics counters including those on socket
8e5842bc05146bb5c171e53b00b24063d17c666cjerenkrantz I/O events and query RTT histograms. [RT #18802]
cdb15137887e284797e9510029098dc725b4dacfjerenkrantz2536. [cleanup] Silence some warnings when -Werror=format-security is
798c7c11dc2fe3b08e591e9c76fc1a84857f2cd4jerenkrantz specified. [RT #19083]
798c7c11dc2fe3b08e591e9c76fc1a84857f2cd4jerenkrantz2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
abaaa634d7cee882b7c4bf078ded749ebf11997erbb2534. [func] Check NAPTR records regular expressions and
abaaa634d7cee882b7c4bf078ded749ebf11997erbb replacement strings to ensure they are syntactically
abaaa634d7cee882b7c4bf078ded749ebf11997erbb valid and consistant. [RT #18168]
0aa8e8fd5a242948518655f2296b3c76386754e5jerenkrantz2533. [doc] ARM: document @ (at-sign). [RT #17144]
0aa8e8fd5a242948518655f2296b3c76386754e5jerenkrantz2532. [bug] dig: check the question section of the response to
de3abad1fe263e577bb11e99b358836bd901397crbb see if it matches the asked question. [RT #18495]
de3abad1fe263e577bb11e99b358836bd901397crbb2531. [bug] Change #2207 was incomplete. [RT #19098]
de3abad1fe263e577bb11e99b358836bd901397crbb2530. [bug] named failed to reject insecure to secure transitions
de3abad1fe263e577bb11e99b358836bd901397crbb via UPDATE. [RT #19101]
de3abad1fe263e577bb11e99b358836bd901397crbb2529. [cleanup] Upgrade libtool to silence complaints from recent
de3abad1fe263e577bb11e99b358836bd901397crbb version of autoconf. [RT #18657]
0a549489abdb309ef25483431e1e5610ed4ba7a8gstein2528. [cleanup] Silence spurious configure warning about
0a549489abdb309ef25483431e1e5610ed4ba7a8gstein --datarootdir [RT #19096]
0a549489abdb309ef25483431e1e5610ed4ba7a8gstein2527. [placeholder]
14c6f2e13d97a4fafac1fbc247a274a298d5b418wrowe2526. [func] New named option "attach-cache" that allows multiple
14c6f2e13d97a4fafac1fbc247a274a298d5b418wrowe views to share a single cache to save memory and
14c6f2e13d97a4fafac1fbc247a274a298d5b418wrowe improve lookup efficiency. Based on contributed code
14c6f2e13d97a4fafac1fbc247a274a298d5b418wrowe from Barclay Osborn, Google. [RT #18905]
f00d1e76bae896c2f6a520eec69b1d0d802d4108jerenkrantz2525. [func] New logging category "query-errors" to provide detailed
f00d1e76bae896c2f6a520eec69b1d0d802d4108jerenkrantz internal information about query failures, especially
58097d7d8d1a394092374b9f6ddf76b7993724a4rbb about server failures. [RT #19027]
58097d7d8d1a394092374b9f6ddf76b7993724a4rbb2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
2f6cebd6b8bf0b044f6579d23117a4a3c364a554wrowe2523. [bug] Random type rdata freed by dns_nsec_typepresent().
2f6cebd6b8bf0b044f6579d23117a4a3c364a554wrowe [RT #19112]
2f6cebd6b8bf0b044f6579d23117a4a3c364a554wrowe2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
070d2f9fd52a3f0e45ca7ae1235c5a5755b80d24rbb2521. [bug] Improve epoll cross compilation support. [RT #19047]
070d2f9fd52a3f0e45ca7ae1235c5a5755b80d24rbb2520. [bug] Update xml statistics version number to 2.0 as change
070d2f9fd52a3f0e45ca7ae1235c5a5755b80d24rbb #2388 made the schema incompatible to the previous
070d2f9fd52a3f0e45ca7ae1235c5a5755b80d24rbb version. [RT #19080]
7c19ce86bbd72bba1d018522250f5f315ffbc0afjerenkrantz2519. [bug] dig/host with -4 or -6 didn't work if more than two
7c19ce86bbd72bba1d018522250f5f315ffbc0afjerenkrantz nameserver addresses of the excluded address family
2264fbcbab4c796c4222c30393c0b218c98b6befrbb preceded in resolv.conf. [RT #19081]
2264fbcbab4c796c4222c30393c0b218c98b6befrbb2518. [func] Add support for the new CERT types from RFC 4398.
2264fbcbab4c796c4222c30393c0b218c98b6befrbb [RT #19077]
e099672a13ea4ff4a11f130406f1baecba5949bajerenkrantz2517. [bug] dig +trace with -4 or -6 failed when it chose a
e099672a13ea4ff4a11f130406f1baecba5949bajerenkrantz nameserver address of the excluded address type.
9b29e0cfeb2c89a047806cc4a2a764afed6bb170wrowe [RT #18843]
9b29e0cfeb2c89a047806cc4a2a764afed6bb170wrowe2516. [bug] glue sort for responses was performed even when not
9b29e0cfeb2c89a047806cc4a2a764afed6bb170wrowe needed. [RT #19039]
441bd066858500e75e4f63ef149120bcf523de58jerenkrantz2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
d6a93816bfaa5b3de5f2e6cb0d172cbe20dd056ejerenkrantz2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
d6a93816bfaa5b3de5f2e6cb0d172cbe20dd056ejerenkrantz a nameserver of the excluded address family.
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe [RT #18848]
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe2513. [bug] Fix windows cli build. [RT #19062]
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe2512. [func] Print a summary of the cached records which make up
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe the negative response. [RT #18885]
117e2968318323d2ad2187fcd4de379d2eca245cwrowe2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
117e2968318323d2ad2187fcd4de379d2eca245cwrowe [RT #18885]
117e2968318323d2ad2187fcd4de379d2eca245cwrowe2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
117e2968318323d2ad2187fcd4de379d2eca245cwrowe [RT #19033]
117e2968318323d2ad2187fcd4de379d2eca245cwrowe2509. [bug] Specifying a fixed query source port was broken.
117e2968318323d2ad2187fcd4de379d2eca245cwrowe [RT #19051]
117e2968318323d2ad2187fcd4de379d2eca245cwrowe2508. [placeholder]
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe2507. [func] Log the recursion quota values when killing the
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe oldest query or refusing to recurse due to quota.
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe [RT #19022]
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe2506. [port] solaris: Check at configure time if
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe hack_shutup_pthreadonceinit is needed. [RT #19037]
de419544885a5c64589dddf1b8517672ee17c1feminfrin2505. [port] Treat amd64 similarly to x86_64 when determining
de419544885a5c64589dddf1b8517672ee17c1feminfrin atomic operation support. [RT #19031]
df14f0d3a5191cdd7c4bb5b03acd135d43a6f51brbb2504. [bug] Address race condition in the socket code. [RT #18899]
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin2503. [port] linux: improve compatibility with Linux Standard
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin Base. [RT #18793]
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin2502. [cleanup] isc_radix: Improve compliance with coding style,
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin document function in <isc/radix.h>. [RT #18534]
956c6100798467199833e7159a00506ee879d772minfrin2501. [func] $GENERATE now supports all rdata types. Multi-field
956c6100798467199833e7159a00506ee879d772minfrin rdata types need to be quoted. See the ARM for
956c6100798467199833e7159a00506ee879d772minfrin details. [RT #18368]
956c6100798467199833e7159a00506ee879d772minfrin2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
47697533fd7ced2259f9150677ea5efa583b6c13rbb function. [RT #18582]
47697533fd7ced2259f9150677ea5efa583b6c13rbb2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
47697533fd7ced2259f9150677ea5efa583b6c13rbb [RT #18837]
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe --- 9.6.0rc1 released ---
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe2498. [bug] Removed a bogus function argument used with
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe ISC_SOCKET_USE_POLLWATCH: it could cause compiler
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe warning or crash named with the debug 1 level
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe of logging. [RT #18917]
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe delegation.
b2c2c8a4bc977c0a6bb937af995efc56dc3879a3wrowe2496. [bug] Add sanity length checks to NSID option. [RT #18813]
b2c2c8a4bc977c0a6bb937af995efc56dc3879a3wrowe2495. [bug] Tighten RRSIG checks. [RT #18795]
67869a9db2967cb50405e51b1d6d1ebab1219e03trawick2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
67869a9db2967cb50405e51b1d6d1ebab1219e03trawick installed. [RT #18826]
4d003677925ceb0abefb9c95355b4c9e9e502899rederpj2493. [bug] The linux capabilities code was not correctly cleaning
4d003677925ceb0abefb9c95355b4c9e9e502899rederpj up after itself. [RT #18767]
67869a9db2967cb50405e51b1d6d1ebab1219e03trawick2492. [func] Rndc status now reports the number of cpus discovered
4d003677925ceb0abefb9c95355b4c9e9e502899rederpj and the number of worker threads when running
e00ae6859667e293a4c40108f524408ae1289f2frbb multi-threaded. [RT #18273]
0db1b9810f06c0e3c537e0e0dfbc30160c308526trawick2491. [func] Attempt to re-use a local port if we are already using
0db1b9810f06c0e3c537e0e0dfbc30160c308526trawick the port. [RT #18548]
13bac43a0f21d8c6401debc1baa76be984474074rbb2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
13bac43a0f21d8c6401debc1baa76be984474074rbb is cleared when IPV6_V6ONLY is set. [RT #18785]
053497224246c4dbef9af594cacf5c00ed271e6cwrowe2489. [port] solaris: Workaround Solaris's kernel bug about
053497224246c4dbef9af594cacf5c00ed271e6cwrowe http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
053497224246c4dbef9af594cacf5c00ed271e6cwrowe Define ISC_SOCKET_USE_POLLWATCH at build time to enable
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe this workaround. [RT #18870]
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe from keyset and .key files. [RT #18694]
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe2487. [bug] Give TCP connections longer to complete. [RT #18675]
314b1f3fac7a0b556146ef055f37df00020604d0jwoolley2486. [func] The default locations for named.pid and lwresd.pid
78e8198247420a3efeb21e38b42c423e5863cbb0jwoolley This allows the owner of the containing directory
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe to be set, for "named -u" support, and allows there
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe to be a permanent symbolic link in the path, for
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe "named -t" support. [RT #18306]
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe2485. [bug] Change update's the handling of obscured RRSIG
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe records. Not all orphaned DS records were being
a906160166014e14adc01c87a956d89de0d79918rbb removed. [RT #18828]
a906160166014e14adc01c87a956d89de0d79918rbb2484. [bug] It was possible to trigger a REQUIRE failure when
a906160166014e14adc01c87a956d89de0d79918rbb adding NSEC3 proofs to the response in
a906160166014e14adc01c87a956d89de0d79918rbb query_addwildcardproof(). [RT #18828]
a906160166014e14adc01c87a956d89de0d79918rbb2483. [port] win32: chroot() is not supported. [RT #18805]
7f66c5be12d3b48b1ebfa79033c099e4f91ff302dougm2482. [port] libxml2: support versions 2.7.* in addition
7f66c5be12d3b48b1ebfa79033c099e4f91ff302dougm to 2.6.*. [RT #18806]
7f66c5be12d3b48b1ebfa79033c099e4f91ff302dougm --- 9.6.0b1 released ---
e00ae6859667e293a4c40108f524408ae1289f2frbb2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
e00ae6859667e293a4c40108f524408ae1289f2frbb collisions. [RT #18812]
e00ae6859667e293a4c40108f524408ae1289f2frbb2480. [bug] named could fail to emit all the required NSEC3
e00ae6859667e293a4c40108f524408ae1289f2frbb records. [RT #18812]
d94fd18ee21dc9b8c1f422144a881e941687d41fdougm2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj2478. [bug] 'addresses' could be used uninitialized in
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj configure_forward(). [RT #18800]
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj2477. [bug] dig: the global option to print the command line is
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj +cmd not print_cmd. Update the output to reflect
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj this. [RT #17008]
a1373889aeb316ed9d1b0f24a715e919d02a4d99dougm2476. [doc] ARM: improve documentation for max-journal-size and
a1373889aeb316ed9d1b0f24a715e919d02a4d99dougm ixfr-from-differences. [RT #15909] [RT #18541]
6b025bd5a034790b2bb31236092265e154d6a565dougm2475. [bug] LRU cache cleanup under overmem condition could purge
330e5149d05dc4f5121b30964753167e43690afdrbb particular entries more aggressively. [RT #17628]
d0af34e0d69afb8195eee403c60357d59ac046e1trawick2474. [bug] ACL structures could be allocated with insufficient
d0af34e0d69afb8195eee403c60357d59ac046e1trawick space, causing an array overrun. [RT #18765]
91cbefdfe308c93892b52045a5f0253506432cd0trawick2473. [port] linux: raise the limit on open files to the possible
91cbefdfe308c93892b52045a5f0253506432cd0trawick maximum value before spawning threads; 'files'
598ce99543701a45a31bb01bf73c83d894592491rederpj specified in named.conf doesn't seem to work with
598ce99543701a45a31bb01bf73c83d894592491rederpj threads as expected. [RT #18784]
598ce99543701a45a31bb01bf73c83d894592491rederpj2472. [port] linux: check the number of available cpu's before
fa687651463b68c7cc0dda80341712d1ef9543efwrowe calling chroot as it depends on "/proc". [RT #16923]
fa687651463b68c7cc0dda80341712d1ef9543efwrowe2471. [bug] named-checkzone was not reporting missing mandatory
fa687651463b68c7cc0dda80341712d1ef9543efwrowe glue when sibling checks were disabled. [RT #18768]
7680ff9dd09d8feb9db31d23f33458d0464e92f1wrowe2470. [bug] Elements of the isc_radix_node_t could be incorrectly
7680ff9dd09d8feb9db31d23f33458d0464e92f1wrowe overwritten. [RT# 18719]
c760d13cffeef40df3f8c5a798e40a064dc80067bjh2469. [port] solaris: Work around Solaris's select() limitations.
c760d13cffeef40df3f8c5a798e40a064dc80067bjh [RT #18769]
78980330fa2be5f42eb3a9c9b73a71a5168944e6minfrin2468. [bug] Resolver could try unreachable servers multiple times.
78980330fa2be5f42eb3a9c9b73a71a5168944e6minfrin [RT #18739]
1fff95696a94273a1629649652cbc5d2e9e8ce39minfrin2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
1fff95696a94273a1629649652cbc5d2e9e8ce39minfrin2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
90ad571a3ddd07e9b96f06b6b425295e1ec93da0minfrin [RT #18302]
90ad571a3ddd07e9b96f06b6b425295e1ec93da0minfrin2465. [bug] Adb's handling of lame addresses was different
90ad571a3ddd07e9b96f06b6b425295e1ec93da0minfrin for IPv4 and IPv6. [RT #18738]
10dd882bd22449ec6c1b8fb0c5227727e2232ba8minfrin2464. [port] linux: check that a capability is present before
10dd882bd22449ec6c1b8fb0c5227727e2232ba8minfrin trying to set it. [RT #18135]
89342f4a895e67868f8fe37a0ac77f1dd9f91868minfrin2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
89342f4a895e67868f8fe37a0ac77f1dd9f91868minfrin API and glibc hides parts of the IPv6 Advanced Socket
89342f4a895e67868f8fe37a0ac77f1dd9f91868minfrin API as a result. This is stupid as it breaks how the
89342f4a895e67868f8fe37a0ac77f1dd9f91868minfrin two halves (Basic and Advanced) of the IPv6 Socket API
7a027a168069a89ca0946e04294f5130d9cbe3b8rederpj were designed to be used but we have to live with it.
7a027a168069a89ca0946e04294f5130d9cbe3b8rederpj Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
7a027a168069a89ca0946e04294f5130d9cbe3b8rederpj API. [RT #18388]
7a027a168069a89ca0946e04294f5130d9cbe3b8rederpj2462. [doc] Document -m (enable memory usage debugging)
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin option for dig. [RT #18757]
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin2461. [port] sunos: Change #2363 was not complete. [RT #17513]
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin --- 9.6.0a1 released ---
330e5149d05dc4f5121b30964753167e43690afdrbb2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
330e5149d05dc4f5121b30964753167e43690afdrbb [RT #18697]
330e5149d05dc4f5121b30964753167e43690afdrbb2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
5ba9b0e6d4e69e3daaad80eba67774408a2355f2wrowe2458. [doc] ARM: update and correction for max-cache-size.
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick [RT #18294]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick2457. [tuning] max-cache-size is reverted to 0, the previous
bfad8636cb9e52b309679a90dadc91b635ecfe2atrawick default. It should be safe because expired cache
bfad8636cb9e52b309679a90dadc91b635ecfe2atrawick entries are also purged. [RT #18684]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick address, regardless of family. They now correctly
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick distinguish IPv4 from IPv6. [RT #18559]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick2455. [bug] Stop metadata being transferred via axfr/ixfr.
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick [RT #18639]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick2453. [bug] Remove NULL pointer dereference in dns_journal_print().
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick [RT #18316]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick2452. [func] Improve bin/test/journalprint. [RT #18316]
50e228f0b8429c27e411611f4863fafaba403b47wrowe2451. [port] solaris: handle runtime linking better. [RT #18356]
50e228f0b8429c27e411611f4863fafaba403b47wrowe2450. [doc] Fix lwresd docbook problem for manual page.
50e228f0b8429c27e411611f4863fafaba403b47wrowe [RT #18672]
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick2449. [placeholder]
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick2448. [func] Add NSEC3 support. [RT #15452]
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick2447. [cleanup] libbind has been split out as a separate product.
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick2446. [func] Add a new log message about build options on startup.
0315d8e436a65aa1fd145ce0a84f6c0f21e304c0wrowe A new command-line option '-V' for named is also
0315d8e436a65aa1fd145ce0a84f6c0f21e304c0wrowe provided to show this information. [RT# 18645]
6270ac7f45156afd9d798dc28f1c6e1d09e040c1rbb2445. [doc] ARM out-of-date on empty reverse zones (list includes
6270ac7f45156afd9d798dc28f1c6e1d09e040c1rbb RFC1918 address, but these are not yet compiled in).
6270ac7f45156afd9d798dc28f1c6e1d09e040c1rbb [RT #18578]
496dc24432cc5c9f95a627865879d4b83dca1055coar2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
496dc24432cc5c9f95a627865879d4b83dca1055coar (clear DF) for UDP responses and requests.
5b5d90c6d3ffb9e28a62c6bc8e2cb60e4740f7f7coar2443. [bug] win32: UDP connect() would not generate an event,
5b5d90c6d3ffb9e28a62c6bc8e2cb60e4740f7f7coar and so connected UDP sockets would never clean up.
496dc24432cc5c9f95a627865879d4b83dca1055coar Fix this by doing an immediate WSAConnect() rather
622f0f22cd52de0e9904b218defdeb3181e113f3trawick than an io completion port type for UDP.
622f0f22cd52de0e9904b218defdeb3181e113f3trawick2442. [bug] A lock could be destroyed twice. [RT# 18626]
622f0f22cd52de0e9904b218defdeb3181e113f3trawick2441. [bug] isc_radix_insert() could copy radix tree nodes
e83476358ef015a1959284421fdc25ab18a7aa02rbb incompletely. [RT #18573]
7b4c4bb891261e613de39a021d7554fd08132fc5rbb2440. [bug] named-checkconf used an incorrect test to determine
7b4c4bb891261e613de39a021d7554fd08132fc5rbb if an ACL was set to none.
7b4c4bb891261e613de39a021d7554fd08132fc5rbb2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
7b4c4bb891261e613de39a021d7554fd08132fc5rbb [RT #18559]
4c6731b2f737f8d7fcacd44b97d9e6bab745f1a5rbb2438. [bug] Timeouts could be logged incorrectly under win32.
4c6731b2f737f8d7fcacd44b97d9e6bab745f1a5rbb2437. [bug] Sockets could be closed too early, leading to
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb inconsistent states in the socket module. [RT #18298]
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb2435. [bug] Fixed an ACL memory leak affecting win32.
251b60354534e12b004603ecf2a83f32756dc885rbb2434. [bug] Fixed a minor error-reporting bug in
251b60354534e12b004603ecf2a83f32756dc885rbb2433. [tuning] Set initial timeout to 800ms.
251b60354534e12b004603ecf2a83f32756dc885rbb2432. [bug] More Windows socket handling improvements. Stop
251b60354534e12b004603ecf2a83f32756dc885rbb using I/O events and use IO Completion Ports
251b60354534e12b004603ecf2a83f32756dc885rbb throughout. Rewrite the receive path logic to make
12348d5b520522b6581d907ef9c1ceda029fbc05rbb it easier to support multiple simultaneous
22d41dd622ae45958da09d4afd1163fd1923f7ddjwoolley requesters in the future. Add stricter consistency
12348d5b520522b6581d907ef9c1ceda029fbc05rbb checking as a compile-time option (define
12348d5b520522b6581d907ef9c1ceda029fbc05rbb ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
a3b2a05c4c0f6a29e75c9349b85640192f6a8bfejwoolley2431. [bug] Acl processing could leak memory. [RT #18323]
d65b067e7797b56d6678b0ddcd0aa9258cd55e64trawick2430. [bug] win32: isc_interval_set() could round down to
d65b067e7797b56d6678b0ddcd0aa9258cd55e64trawick zero if the input was less than NS_INTERVAL
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley nanoseconds. Round up instead. [RT #18549]
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley2429. [doc] nsupdate should be in section 1 of the man pages.
f947ecf8a772cbfcce0315feb68ad88e84299ad0trawick [RT #18283]
f947ecf8a772cbfcce0315feb68ad88e84299ad0trawick2428. [bug] dns_iptable_merge() mishandled merges of negative
f947ecf8a772cbfcce0315feb68ad88e84299ad0trawick tables. [RT #18409]
82efd02118af953c3840478fa5e979a4194a579fwrowe2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
82efd02118af953c3840478fa5e979a4194a579fwrowe was set. [RT #18528]
82efd02118af953c3840478fa5e979a4194a579fwrowe2426. [bug] libbind: inet_net_pton() can sometimes return the
82efd02118af953c3840478fa5e979a4194a579fwrowe wrong value if excessively large net masks are
82efd02118af953c3840478fa5e979a4194a579fwrowe supplied. [RT #18512]
82efd02118af953c3840478fa5e979a4194a579fwrowe2425. [bug] named didn't detect unavailable query source addresses
82efd02118af953c3840478fa5e979a4194a579fwrowe at load time. [RT #18536]
82efd02118af953c3840478fa5e979a4194a579fwrowe2424. [port] configure now probes for a working epoll
82efd02118af953c3840478fa5e979a4194a579fwrowe implementation. Allow the use of kqueue,
82efd02118af953c3840478fa5e979a4194a579fwrowe epoll and /dev/poll to be selected at compile
ff2fef0d709ee06646b3462cd3ef39648a54c7f7jwoolley time. [RT #18277]
ff2fef0d709ee06646b3462cd3ef39648a54c7f7jwoolley2423. [security] Randomize server selection on queries, so as to
ff2fef0d709ee06646b3462cd3ef39648a54c7f7jwoolley make forgery a little more difficult. Instead of
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley always preferring the server with the lowest RTT,
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe pick a server with RTT within the same 128
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe millisecond band. [RT #18441]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe2422. [bug] Handle the special return value of a empty node as
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley if it was a NXRRSET in the validator. [RT #18447]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe2421. [func] Add new command line option '-S' for named to specify
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe the max number of sockets. [RT #18493]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe Use caution: this option may not work for some
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe operating systems without rebuilding named.
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley2420. [bug] Windows socket handling cleanup. Let the io
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe completion event send out canceled read/write
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe done events, which keeps us from writing to memory
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe we no longer have ownership of. Add debugging
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley socket_log() function. Rework TCP socket handling
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe to not leak sockets.
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe should not be used for isc_sockettype_fdwatch sockets.
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe [RT #18521]
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
731c41a39b8273a6c4b8b87b6fd0ba5c7f3f9e2bwrowe [RT #18430]
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe2417. [bug] Connecting UDP sockets for outgoing queries could
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe unexpectedly fail with an 'address already in use'
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe error. [RT #18411]
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe2416. [func] Log file descriptors that cause exceeding the
731c41a39b8273a6c4b8b87b6fd0ba5c7f3f9e2bwrowe internal maximum. [RT #18460]
cd32ea298a494089c6886c8de0e8ad13ddc7ee6cwrowe2415. [bug] 'rndc dumpdb' could trigger various assertion failures
cd32ea298a494089c6886c8de0e8ad13ddc7ee6cwrowe in rbtdb.c. [RT #18455]
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe2414. [bug] A masterdump context held the database lock too long,
cd32ea298a494089c6886c8de0e8ad13ddc7ee6cwrowe causing various troubles such as dead lock and
af2bf35f47aaa3f1a3b1fe8336b9d20efad5b7e9gregames recursive lock acquisition. [RT #18311, #18456]
af2bf35f47aaa3f1a3b1fe8336b9d20efad5b7e9gregames2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
e49758465fbf67f29f9aeda996d09f7cc6fa9fe5rbb2412. [bug] win32: address a resource leak. [RT #18374]
e49758465fbf67f29f9aeda996d09f7cc6fa9fe5rbb2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
e49758465fbf67f29f9aeda996d09f7cc6fa9fe5rbb for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
e49758465fbf67f29f9aeda996d09f7cc6fa9fe5rbb at compilation time. [RT #18433]
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb Note: with changes #2469 and #2421 above, there is no
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb2410. [bug] Correctly delete m_versionInfo. [RT #18432]
62db15de4c1f335a64d45821796ae197cff94ef8rbb2409. [bug] Only log that we disabled EDNS processing if we were
62db15de4c1f335a64d45821796ae197cff94ef8rbb subsequently successful. [RT #18029]
62db15de4c1f335a64d45821796ae197cff94ef8rbb2408. [bug] A duplicate TCP dispatch event could be sent, which
62db15de4c1f335a64d45821796ae197cff94ef8rbb could then trigger an assertion failure in
62db15de4c1f335a64d45821796ae197cff94ef8rbb resquery_response(). [RT #18275]
f2e16ea0697f128c32da623a0b2b9d0f81c5ebcawrowe2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
3463e3fe80229b9cded9130e8bd13e961ad2ad2cwrowe2406. [placeholder]
3463e3fe80229b9cded9130e8bd13e961ad2ad2cwrowe2405. [cleanup] The default value for dnssec-validation was changed to
3463e3fe80229b9cded9130e8bd13e961ad2ad2cwrowe "yes" in 9.5.0-P1 and all subsequent releases; this
7ff254655b6cb0516fa27409470a98554bbec706wrowe was inadvertently omitted from CHANGES at the time.
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames2404. [port] hpux: files unlimited support.
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames2403. [bug] TSIG context leak. [RT #18341]
286129112dc6bfee53f0db4f945d3352d4d5bed7stoddard2402. [port] Support Solaris 2.11 and over. [RT #18362]
b1627fe7e2cb3809dcdfdf1fcbbb6dbccaf788c6rbb2401. [bug] Expect to get E[MN]FILE errno internal_accept()
b1627fe7e2cb3809dcdfdf1fcbbb6dbccaf788c6rbb (from accept() or fcntl() system calls). [RT #18358]
b1627fe7e2cb3809dcdfdf1fcbbb6dbccaf788c6rbb2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
b1627fe7e2cb3809dcdfdf1fcbbb6dbccaf788c6rbb [RT #18297]
eccae8f28bd9fcf6a2d1f29548f7c3b8e297c712wrowe2399. [placeholder]
eccae8f28bd9fcf6a2d1f29548f7c3b8e297c712wrowe2398. [bug] Improve file descriptor management. New,
4e136881902ae5dfba3c59a23db7aa09345cea3awrowe temporary, named.conf option reserved-sockets,
06c2a9f9fcea4b8a21d6b7ffdd50c7a40edf10ffgregames default 512. [RT #18344]
06c2a9f9fcea4b8a21d6b7ffdd50c7a40edf10ffgregames2397. [bug] gssapi_functions had too many elements. [RT #18355]
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames2396. [bug] Don't set SO_REUSEADDR for randomized ports.
6529086e53a38486d6cf0eac256b96548b6ef299wrowe [RT #18336]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe2395. [port] Avoid warning and no effect from "files unlimited"
6529086e53a38486d6cf0eac256b96548b6ef299wrowe on Linux when running as root. [RT #18335]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe2394. [bug] Default configuration options set the limit for
6529086e53a38486d6cf0eac256b96548b6ef299wrowe open files to 'unlimited' as described in the
6529086e53a38486d6cf0eac256b96548b6ef299wrowe documentation. [RT #18331]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe2393. [bug] nested acls containing keys could trigger an
9876642ec8126175f143702d7b949643f8128fdftrawick assertion in acl.c. [RT #18166]
9876642ec8126175f143702d7b949643f8128fdftrawick2392. [bug] remove 'grep -q' from acl test script, some platforms
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames don't support it. [RT #18253]
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames2391. [port] hpux: cover additional recvmsg() error codes.
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames [RT #18301]
0f2ac39337f7543f197db8b040f596123167eb2dstoddard2390. [bug] dispatch.c could make a false warning on 'odd socket'.
0f2ac39337f7543f197db8b040f596123167eb2dstoddard [RT #18301].
0f2ac39337f7543f197db8b040f596123167eb2dstoddard2389. [bug] Move the "working directory writable" check to after
0f2ac39337f7543f197db8b040f596123167eb2dstoddard the ns_os_changeuser() call. [RT #18326]
5183e10e45a86e2dd1112a4d71c24db3facbbc9agregames2388. [bug] Avoid using tables for layout purposes in
5183e10e45a86e2dd1112a4d71c24db3facbbc9agregames statistics XSL [RT #18159].
4ff47e3535a6da266acc3f0cf743046dbf16a856rbb2387. [bug] Silence compiler warnings in lib/isc/radix.c.
afab3e893c3fecabf2e3cac4e37ada58db984cearbb [RT #18147] [RT #18258]
afab3e893c3fecabf2e3cac4e37ada58db984cearbb2386. [func] Add warning about too small 'open files' limit.
afab3e893c3fecabf2e3cac4e37ada58db984cearbb [RT #18269]
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb2385. [bug] A condition variable in socket.c could leak in
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb rare error handling [RT #17968].
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb2384. [security] Fully randomize UDP query ports to improve
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb forgery resilience. [RT #17949, #18098]
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard2383. [bug] named could double queries when they resulted in
6529086e53a38486d6cf0eac256b96548b6ef299wrowe SERVFAIL due to overkilling EDNS0 failure detection.
6529086e53a38486d6cf0eac256b96548b6ef299wrowe [RT #18182]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
30309f86bfd564437654aa822a19cd0cb29ca6f8wrowe2381. [port] dlz/mysql: support multiple install layouts for
30309f86bfd564437654aa822a19cd0cb29ca6f8wrowe mysql. <prefix>/include/{,mysql/}mysql.h and
30309f86bfd564437654aa822a19cd0cb29ca6f8wrowe <prefix>/lib/{,mysql/}. [RT #18152]
65db4f712167a3498de73cee5c08032a8aa6a010rbb2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
65db4f712167a3498de73cee5c08032a8aa6a010rbb proofs which, in turn, caused validation failures
65db4f712167a3498de73cee5c08032a8aa6a010rbb for insecure zones immediately below a secure zone
65db4f712167a3498de73cee5c08032a8aa6a010rbb the server was authoritative for. [RT #18112]
ed4f9ec869d7fc5bd220c8d70ee58eed9b32d60arederpj2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
ed4f9ec869d7fc5bd220c8d70ee58eed9b32d60arederpj TLDs and supported RRs with TTLs [RT #17972]
ed4f9ec869d7fc5bd220c8d70ee58eed9b32d60arederpj2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard [RT #18169]
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard2376. [bug] Change #2144 was not complete.
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard2375. [placeholder]
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard2374. [bug] "blackhole" ACLs could cause named to segfault due
c981632de03d61667b7a6dda3e1f0a80fd5973b1gregames to some uninitialized memory. [RT #18095]
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick2373. [bug] Default values of zone ACLs were re-parsed each time a
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick new zone was configured, causing an overconsumption
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick of memory. [RT #18092]
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick2371. [doc] Add +nsid option to dig man page. [RT #18039]
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick2370. [bug] "rndc freeze" could trigger an assertion in named
688f7d0bc138bb02f92288017920468e7e314f23stoddard when called on a nonexistent zone. [RT #18050]
688f7d0bc138bb02f92288017920468e7e314f23stoddard2369. [bug] libbind: Array bounds overrun on read in bitncmp().
688f7d0bc138bb02f92288017920468e7e314f23stoddard [RT #18054]
688f7d0bc138bb02f92288017920468e7e314f23stoddard2368. [port] Linux: use libcap for capability management if
448a83963e3ec557bc9f9020ab44f9681595d1eerbb possible. [RT# 18026]
3b8937baf1826c625c1ca90d220453a5e4b499edrbb2367. [bug] Improve counting of dns_resstatscounter_retry
3b8937baf1826c625c1ca90d220453a5e4b499edrbb [RT #18030]
3b8937baf1826c625c1ca90d220453a5e4b499edrbb2366. [bug] Adb shutdown race. [RT #18021]
448a83963e3ec557bc9f9020ab44f9681595d1eerbb2365. [bug] Fix a bug that caused dns_acl_isany() to return
e654452796751e21828a4078767e075eccf3b232stoddard spurious results. [RT #18000]
e654452796751e21828a4078767e075eccf3b232stoddard2364. [bug] named could trigger a assertion when serving a
e654452796751e21828a4078767e075eccf3b232stoddard malformed signed zone. [RT #17828]
e654452796751e21828a4078767e075eccf3b232stoddard2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
4670899d8a45ac6add3105181adf1976a1fae109stoddard [RT #17513]
85986096003221e8eb135ad1fda59a57c3d0528brbb2362. [cleanup] Make "rrset-order fixed" a compile-time option.
cf293fe6e2515d89788ec515ce6266ad6f13a724stoddard settable by "./configure --enable-fixed-rrset".
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley Disabled by default. [RT #17977]
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley2361. [bug] "recursion" statistics counter could be counted
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley multiple times for a single query. [RT #17990]
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley2360. [bug] Fix a condition where we release a database version
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley (which may acquire a lock) while holding the lock.
7537a55be7520037878a521d4ec8c8eb2d44a288rbb2359. [bug] Fix NSID bug. [RT #17942]
7537a55be7520037878a521d4ec8c8eb2d44a288rbb2358. [doc] Update host's default query description. [RT #17934]
7537a55be7520037878a521d4ec8c8eb2d44a288rbb2357. [port] Don't use OpenSSL's engine support in versions before
7537a55be7520037878a521d4ec8c8eb2d44a288rbb OpenSSL 0.9.7f. [RT #17922]
7537a55be7520037878a521d4ec8c8eb2d44a288rbb2356. [bug] Built in mutex profiler was not scalable enough.
7537a55be7520037878a521d4ec8c8eb2d44a288rbb [RT #17436]
7537a55be7520037878a521d4ec8c8eb2d44a288rbb2355. [func] Extend the number statistics counters available.
7537a55be7520037878a521d4ec8c8eb2d44a288rbb [RT #17590]
de0fbde2191d651a2dd0296e0fd4c449fa9f1d39wrowe2354. [bug] Failed to initialize some rdatasetheader_t elements.
de0fbde2191d651a2dd0296e0fd4c449fa9f1d39wrowe [RT #17927]
de0fbde2191d651a2dd0296e0fd4c449fa9f1d39wrowe2353. [func] Add support for Name Server ID (RFC 5001).
01f404bacecbd1354af8f04c23a28acef5044e73jwoolley 'dig +nsid' requests NSID from server.
01f404bacecbd1354af8f04c23a28acef5044e73jwoolley 'request-nsid yes;' causes recursive server to send
01f404bacecbd1354af8f04c23a28acef5044e73jwoolley NSID requests to upstream servers. Server responds
54f7f1c85247dad29d8fa275866cea31d465b392stoddard to NSID requests with the string configured by
54f7f1c85247dad29d8fa275866cea31d465b392stoddard 'server-id' option. [RT #17091]
54f7f1c85247dad29d8fa275866cea31d465b392stoddard2352. [bug] Various GSS_API fixups. [RT #17729]
54f7f1c85247dad29d8fa275866cea31d465b392stoddard2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
3af8fbdd62c9495c8f879eef1eb952a638a18a7adougm2350. [port] win32: IPv6 support. [RT #17797]
e14ec68ef48bbf6c3dc567900f9e087eaf0bc931trawick2349. [func] Provide incremental re-signing support for secure
e14ec68ef48bbf6c3dc567900f9e087eaf0bc931trawick dynamic zones. [RT #1091]
227e0bfd39e7c757d3618c8ada78d80cd1143d32wrowe2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
227e0bfd39e7c757d3618c8ada78d80cd1143d32wrowe Documentation is in the new README.pkcs11 file.
227e0bfd39e7c757d3618c8ada78d80cd1143d32wrowe New tool, dnssec-keyfromlabel, which takes the
227e0bfd39e7c757d3618c8ada78d80cd1143d32wrowe label of a key pair in a HSM and constructs a DNS
8ff9257331986cb3646442ab61703fcc02158046trawick key pair for use by named and dnssec-signzone.
8ff9257331986cb3646442ab61703fcc02158046trawick [RT #16844]
8ff9257331986cb3646442ab61703fcc02158046trawick2347. [bug] Delete now traverses the RB tree in the canonical
8ff9257331986cb3646442ab61703fcc02158046trawick order. [RT #17451]
d9b416f8cfaaadcbc739cd8c7c356e76efdd3a2agregames2346. [func] Memory statistics now cover all active memory contexts
d9b416f8cfaaadcbc739cd8c7c356e76efdd3a2agregames in increased detail. [RT #17580]
d9b416f8cfaaadcbc739cd8c7c356e76efdd3a2agregames2345. [bug] named-checkconf failed to detect when forwarders
4192c91889a84b18aec0b046a94a2b2863be204cstoddard were set at both the options/view level and in
4192c91889a84b18aec0b046a94a2b2863be204cstoddard a root zone. [RT #17671]
4192c91889a84b18aec0b046a94a2b2863be204cstoddard2344. [bug] Improve "logging{ file ...; };" documentation.
4192c91889a84b18aec0b046a94a2b2863be204cstoddard [RT #17888]
4192c91889a84b18aec0b046a94a2b2863be204cstoddard2343. [bug] (Seemingly) duplicate IPv6 entries could be
7af2fcad9e14a79d7020a33766fbd3a4dfd088dcorlikowski created in ADB. [RT #17837]
7af2fcad9e14a79d7020a33766fbd3a4dfd088dcorlikowski2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
7cc9511b8f1fff69439041327dc55e3423ccf439stoddard2341. [bug] libbind: add missing -I../include for off source
7cc9511b8f1fff69439041327dc55e3423ccf439stoddard tree builds. [RT #17606]
b9d82dd4bc49204d9c2c5523e36b3109da298c04wrowe2340. [port] openbsd: interface configuration. [RT #17700]
1ccb67ea7d1f2a3747d285835fd0ce0d123b66b2orlikowski2339. [port] tru64: support for libbind. [RT #17589]
1ccb67ea7d1f2a3747d285835fd0ce0d123b66b2orlikowski2338. [bug] check_ds() could be called with a non DS rdataset.
3f4d7fdb598d64d80ab8656852276246f2f3b502rbb [RT #17598]
a7318397b355119d990d1f311b951dea2aafc53arbb2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
a7318397b355119d990d1f311b951dea2aafc53arbb2336. [func] If "named -6" is specified then listen on all IPv6
a7318397b355119d990d1f311b951dea2aafc53arbb interfaces if there are not listen-on-v6 clauses in
3f4d7fdb598d64d80ab8656852276246f2f3b502rbb2335. [port] sunos: libbind and *printf() support for long long.
3f4d7fdb598d64d80ab8656852276246f2f3b502rbb [RT #17513]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard bug in fromstruct_txt(). [RT #17609]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard2333. [bug] Fix off by one error in isc_time_nowplusinterval().
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard [RT #17608]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard2332. [contrib] query-loc-0.4.0. [RT #17602]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard2331. [bug] Failure to regenerate any signatures was not being
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard reported nor being past back to the UPDATE client.
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard [RT #17570]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard2330. [bug] Remove potential race condition when handling
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard over memory events. [RT #17572]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard WARNING: API CHANGE: over memory callback
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard function now needs to call isc_mem_waterack().
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard See <isc/mem.h> for details.
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard2329. [bug] Clearer help text for dig's '-x' and '-i' options.
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard2327. [bug] It was possible to dereference a NULL pointer in
0530cd68803616cfba0456038f2e679d41ebecb1minfrin rbtdb.c. Implement dead node processing in zones as
55069cedbbaf2768c1f317c80129c6f869890fb9rbb we do for caches. [RT #17312]
55069cedbbaf2768c1f317c80129c6f869890fb9rbb2326. [bug] It was possible to trigger a INSIST in the acache
55069cedbbaf2768c1f317c80129c6f869890fb9rbb processing.
6206099ac06c8fcc8c342e993e5d47d3dfb95d8dminfrin2325. [port] Linux: use capset() function if available. [RT #17557]
0530cd68803616cfba0456038f2e679d41ebecb1minfrin2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
0530cd68803616cfba0456038f2e679d41ebecb1minfrin2323. [port] tru64: namespace clash. [RT #17547]
b9d75184a83c325dc6cdf5488b0b1a4adec27506stoddard2322. [port] MacOS: work around the limitation of setrlimit()
b9d75184a83c325dc6cdf5488b0b1a4adec27506stoddard for RLIMIT_NOFILE. [RT #17526]
ba4c566c200c2436dae841b7c811807c80cd712afielding2321. [placeholder]
2a7df37e1fa5276b519eb1f04827b96204ba8873trawick2320. [func] Make statistics counters thread-safe for platforms
2a7df37e1fa5276b519eb1f04827b96204ba8873trawick that support certain atomic operations. [RT #17466]
864c5615d55b8ebbde24e72043f6325741335a74fielding2319. [bug] Silence Coverity warnings in
ff33056d9ea71f35e6fb3c17d53a18931be70a99minfrin2318. [port] sunos fixes for libbind. [RT #17514]
ff33056d9ea71f35e6fb3c17d53a18931be70a99minfrin2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
ea92d0ffcb30b186010a2c8ca2c80d2ac09e34dastoddard2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
ba4c566c200c2436dae841b7c811807c80cd712afielding [RT #17513]
ba4c566c200c2436dae841b7c811807c80cd712afielding2315. [bug] Used incorrect address family for mapped IPv4
ba4c566c200c2436dae841b7c811807c80cd712afielding addresses in acl.c. [RT #17519]
342e2ae0f9ab3e3a56c2f37be6ec6c9c44f9ef48trawick2314. [bug] Uninitialized memory use on error path in
cb5d3f2f217d457dada4883addb1dc9f3f17bb85fielding2313. [cleanup] Silence Coverity warnings. Handle private stacks.
cb5d3f2f217d457dada4883addb1dc9f3f17bb85fielding [RT #17447] [RT #17478]
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick [RT #17458]
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick2311. [bug] IPv6 addresses could match IPv4 ACL entries and
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick vice versa. [RT #17462]
7c60e4e710c92b3c4a0eb831bc6dd65368c599bcstoddard2310. [bug] dig, host, nslookup: flush stdout before emitting
7c60e4e710c92b3c4a0eb831bc6dd65368c599bcstoddard debug/fatal messages. [RT #17501]
7c60e4e710c92b3c4a0eb831bc6dd65368c599bcstoddard2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard [RT #17455]
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard [RT #17495]
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
0e161c3b556697af1dd88b719c05d3af239682d5dougm2306. [bug] Remove potential race from lib/dns/resolver.c.
01f61931c658183042469eb02fd3f61e4e643a6atrawick [RT #17470]
aa616c3b5a4aa59867472cddf7d8e63693808f0erederpj2305. [security] inet_network() buffer overflow. CVE-2008-0122.
aa616c3b5a4aa59867472cddf7d8e63693808f0erederpj2304. [bug] Check returns from all dns_rdata_tostruct() calls.
80e9324586de2fa55e2da4df409e6a85885ea659fielding [RT #17460]
80e9324586de2fa55e2da4df409e6a85885ea659fielding2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
bacd210652b4559c2597f62e1d41ccbde92acdfafielding [RT #17471]
4682cf97ee2eca42a7222e0113ebacf5ef70c4efrbb2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
4682cf97ee2eca42a7222e0113ebacf5ef70c4efrbb2301. [bug] Remove resource leak and fix error messages in
9f7fc4627b7d98f6f6955ad6cf0cec5a3e1c4debfielding2300. [bug] Fixed failure to close open file in
1702068419e130e99f021228659597c1ec658edcchuck2299. [bug] Remove unnecessary NULL check in
01f61931c658183042469eb02fd3f61e4e643a6atrawick2298. [bug] isc_mutex_lock() failure not caught in
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard2297. [bug] isc_entropy_createfilesource() failure not caught in
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard2296. [port] Allow docbook stylesheet location to be specified to
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard configure. [RT #17457]
a70c3ad07126101795f5a988e86c88a699b297cerederpj2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb [RT #17459]
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb2294. [func] Allow the experimental statistics channels to have
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb multiple connections and ACL.
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb Note: the stats-server and stats-server-v6 options
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb available in the previous beta releases are replaced
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb with the generic statistics-channels statement.
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb2293. [func] Add ACL regression test. [RT #17375]
105475009f541187ba7a14a367547d9404c578befielding2292. [bug] Log if the working directory is not writable.
105475009f541187ba7a14a367547d9404c578befielding [RT #17312]
105475009f541187ba7a14a367547d9404c578befielding2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
105475009f541187ba7a14a367547d9404c578befielding failure to set PR_SET_DUMPABLE. [RT #17312]
b90c64e517df3fe1c97806830f84a30362187f0afielding2290. [bug] Let AD in the query signal that the client wants AD
b90c64e517df3fe1c97806830f84a30362187f0afielding set in the response. [RT #17301]
b90c64e517df3fe1c97806830f84a30362187f0afielding2289. [func] named-checkzone now reports the out-of-zone CNAME
105475009f541187ba7a14a367547d9404c578befielding found. [RT #17309]
6ff63662058d5891fc110f8b357a3604d7f7deb3trawick2288. [port] win32: mark service as running when we have finished
6ff63662058d5891fc110f8b357a3604d7f7deb3trawick loading. [RT #17441]
c4be1ca9db22140f3788166f0195304e2fe4743bgregames2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
8019a211b7453e80e6e22db6d41fe68dd7f8c4b8fielding2286. [func] Allow a TCP connection to be used as a weak
8019a211b7453e80e6e22db6d41fe68dd7f8c4b8fielding authentication method for reverse zones.
8019a211b7453e80e6e22db6d41fe68dd7f8c4b8fielding New update-policy methods tcp-self and 6to4-self.
8019a211b7453e80e6e22db6d41fe68dd7f8c4b8fielding [RT #17378]
a70c3ad07126101795f5a988e86c88a699b297cerederpj2285. [func] Test framework for client memory context management.
a70c3ad07126101795f5a988e86c88a699b297cerederpj [RT #17377]
a70c3ad07126101795f5a988e86c88a699b297cerederpj2284. [bug] Memory leak in UPDATE prerequisite processing.
357b3c68d77f4187bf6be49c248b90ba50b98f4agregames [RT #17377]
a3a9ceac1bc30598c594c89e1382609496b7752brbb2283. [bug] TSIG keys were not attaching to the memory
a3a9ceac1bc30598c594c89e1382609496b7752brbb context. TSIG keys should use the rings
a3a9ceac1bc30598c594c89e1382609496b7752brbb memory context rather than the clients memory
a3a9ceac1bc30598c594c89e1382609496b7752brbb context. [RT #17377]
25e17566bc9005778707317c8919c610513a4418stoddard2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
25e17566bc9005778707317c8919c610513a4418stoddard2281. [bug] Attempts to use undefined acls were not being logged.
25e17566bc9005778707317c8919c610513a4418stoddard [RT #17307]
25e17566bc9005778707317c8919c610513a4418stoddard2280. [func] Allow the experimental http server to be reached
25e17566bc9005778707317c8919c610513a4418stoddard over IPv6 as well as IPv4. [RT #17332]
44ea927aaaa7c419de1c824beb01b26216f387c3dougm2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
44ea927aaaa7c419de1c824beb01b26216f387c3dougm to protect applications from receiving spurious
44ea927aaaa7c419de1c824beb01b26216f387c3dougm SIGPIPE signals when using the resolver.
a601a32cec653022741d22b5d692b6afd6c4dc55trawick2278. [bug] win32: handle the case where Windows returns no
a601a32cec653022741d22b5d692b6afd6c4dc55trawick search list or DNS suffix. [RT #17354]
a601a32cec653022741d22b5d692b6afd6c4dc55trawick2277. [bug] Empty zone names were not correctly being caught at
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb in the post parse checks. [RT #17357]
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb2275. [func] Add support to dig to perform IXFR queries over UDP.
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb [RT #17235]
decf1efd1558ed0d2562e2f4f2dd741dcc0c392crbb2274. [func] Log zone transfer statistics. [RT #17336]
6202bc12656548c624a235bf43d6c866719b2b06rbb2273. [bug] Adjust log level to WARNING when saving inconsistent
6202bc12656548c624a235bf43d6c866719b2b06rbb stub/slave master and journal files. [RT# 17279]
6202bc12656548c624a235bf43d6c866719b2b06rbb2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
6202bc12656548c624a235bf43d6c866719b2b06rbb [RT #17262]
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj2271. [bug] Fix a memory leak in http server code [RT #17100]
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj2270. [bug] dns_db_closeversion() version->writer could be reset
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj before it is tested. [RT #17290]
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
4f110a6b1eb8b6a88a2a0c804cf699062f67f708rbb2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
4f110a6b1eb8b6a88a2a0c804cf699062f67f708rbb --- 9.5.0b1 released ---
7aae0c3ef8e7f18f57e2712815c7b48358e5ff68rbb2267. [bug] Radix tree node_num value could be set incorrectly,
7aae0c3ef8e7f18f57e2712815c7b48358e5ff68rbb causing positive ACL matches to look like negative
d353d275978f11f5221110e8f954d09d03ec5e3arbb ones. [RT #17311]
d353d275978f11f5221110e8f954d09d03ec5e3arbb2266. [bug] client.c:get_clientmctx() returned the same mctx
d353d275978f11f5221110e8f954d09d03ec5e3arbb once the pool of mctx's was filled. [RT #17218]
20fb0ba160cf0ca91b3f0f0d552cbe60d92b0449fielding2265. [bug] Test that the memory context's basic_table is non NULL
20fb0ba160cf0ca91b3f0f0d552cbe60d92b0449fielding before freeing. [RT #17265]
66f62d70d05d9011c6ac59d5cd10a24e452fa1b3rbb2264. [bug] Server prefix length was being ignored. [RT #17308]
66f62d70d05d9011c6ac59d5cd10a24e452fa1b3rbb2263. [bug] "named-checkconf -z" failed to set default value
9832ee60b23ca2a3faa403bbe88720815969a9fefielding for "check-integrity". [RT #17306]
9832ee60b23ca2a3faa403bbe88720815969a9fefielding2262. [bug] Error status from all but the last view could be
dd6d55810261b3c26c4a2ec2e089c031beb1d44dgregames lost. [RT #17292]
dd6d55810261b3c26c4a2ec2e089c031beb1d44dgregames2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
ee25ccdf4aa79a7a7f2dfc13fc118f0a343422fcwrowe2260. [bug] Reported wrong clients-per-query when increasing the
ee25ccdf4aa79a7a7f2dfc13fc118f0a343422fcwrowe value. [RT #17236]
90a8cab05f4d949dd1317df7e19a2f787c46a5f6rbb2259. [placeholder]
90a8cab05f4d949dd1317df7e19a2f787c46a5f6rbb --- 9.5.0a7 released ---
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb [RT #17241]
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb2257. [bug] win32: Use the full path to vcredist_x86.exe when
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb calling it. [RT #17222]
da3e32612f06d3082e41ba709919c996c89b8c06rederpj2256. [bug] win32: Correctly register the installation location of
da3e32612f06d3082e41ba709919c996c89b8c06rederpj2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
da3e32612f06d3082e41ba709919c996c89b8c06rederpj2254. [bug] timer.c:dispatch() failed to lock timer->lock
da3e32612f06d3082e41ba709919c996c89b8c06rederpj when reading timer->idle allowing it to see
da3e32612f06d3082e41ba709919c996c89b8c06rederpj intermediate values as timer->idle was reset by
734ab810a1c5028776ed5d6c54b2ef974b75d397rbb isc_timer_touch(). [RT #17243]
0d9c389e9c63d02edb068917d49af2fa8012af91marc2253. [func] "max-cache-size" defaults to 32M.
0d9c389e9c63d02edb068917d49af2fa8012af91marc "max-acache-size" defaults to 16M.
ae416a3cdff7a12665838a2184183299dcee6ec9bjh2252. [bug] Fixed errors in sortlist code [RT #17216]
ae416a3cdff7a12665838a2184183299dcee6ec9bjh2251. [placeholder]
b0bb6f215e43a79342c422bc9b0c258add88ca51stoddard2250. [func] New flag 'memstatistics' to state whether the
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick memory statistics file should be written or not.
99cec2acb38d6a2fb2d4a9d437db7b50ef5b208awrowe Additionally named's -m option will cause the
99cec2acb38d6a2fb2d4a9d437db7b50ef5b208awrowe statistics file to be written. [RT #17113]
4d83a32b74579903e90aa1cb8574b5b97404d0c4trawick2249. [bug] Only set Authentic Data bit if client requested
4d83a32b74579903e90aa1cb8574b5b97404d0c4trawick DNSSEC, per RFC 3655 [RT #17175]
4d83a32b74579903e90aa1cb8574b5b97404d0c4trawick2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
7c2d1ecc95b2213a3fd449b2549999ed6f19f6berbb2247. [doc] Sort doc/misc/options. [RT #17067]
7c2d1ecc95b2213a3fd449b2549999ed6f19f6berbb2246. [bug] Make the startup of test servers (ans.pl) more
7c2d1ecc95b2213a3fd449b2549999ed6f19f6berbb robust. [RT #17147]
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx2245. [bug] Validating lack of DS records at trust anchors wasn't
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx working. [RT #17151]
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx2244. [func] Allow the check of nameserver names against the
383a9c6af58f5a670e8ef8b7f222ce71dbb7bee5dirkx SOA MNAME field to be disabled by specifying
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx 'notify-to-soa yes;'. [RT #17073]
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick2243. [func] Configuration files without a newline at the end now
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick parse without error. [RT #17120]
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
73cd9876e07c696a3e3563277a1d4e3173861af6stoddard library could require a source of random data.
73cd9876e07c696a3e3563277a1d4e3173861af6stoddard [RT #17127]
73cd9876e07c696a3e3563277a1d4e3173861af6stoddard2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
15ecbdb46249bbd3ac51fdacaff3b3ac4d179ffarbb2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
f0484231f96a9d95f5044c1c8cb33b322d6f9bcbdougm a number of INSIST()s into plain fatal() errors
f0484231f96a9d95f5044c1c8cb33b322d6f9bcbdougm which report the triggering result code.
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb The 'key' command wasn't disabling GSS-TSIG.
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb [RT #17099]
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb2238. [bug] It was possible to trigger a REQUIRE when a
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb validation was canceled. [RT #17106]
2ca377182c951f9895cd5e7a350b442a39c8eb23rbb2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
1217c8c05f7e3ac0cac8c8dc0c6e7979326c977arbb2236. [bug] dnssec-signzone failed to preserve the case of
1217c8c05f7e3ac0cac8c8dc0c6e7979326c977arbb of wildcard owner names. [RT #17085]
1217c8c05f7e3ac0cac8c8dc0c6e7979326c977arbb2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
893328ef6ff86d0ca27774778d84410353789fb0fielding2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
893328ef6ff86d0ca27774778d84410353789fb0fielding2233. [func] Add support for O(1) ACL processing, based on
893328ef6ff86d0ca27774778d84410353789fb0fielding radix tree code originally written by Kevin
893328ef6ff86d0ca27774778d84410353789fb0fielding Brintnall. [RT #16288]
274de94b0b59f4ee126dca1726624980828d0cd0stoddard2232. [bug] dns_adb_findaddrinfo() could fail and return
274de94b0b59f4ee126dca1726624980828d0cd0stoddard ISC_R_SUCCESS. [RT #17137]
85d733e70c94a57c9ff893ed05d8b9cfcd0f083fstoddard2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
85d733e70c94a57c9ff893ed05d8b9cfcd0f083fstoddard [RT #17088]
962f339c5f0f61adde79936f610fb05ce0854d6echuck2230. [bug] We could INSIST reading a corrupted journal.
3f0dd56fa6b79fe389f20738369b290e2f3e9201trawick [RT #17132]
3f0dd56fa6b79fe389f20738369b290e2f3e9201trawick2229. [bug] Null pointer dereference on query pool creation
3f0dd56fa6b79fe389f20738369b290e2f3e9201trawick failure. [RT #17133]
70b83609159f247f5920421a890dc27a0718d63adreid2228. [contrib] contrib: Change 2188 was incomplete.
70b83609159f247f5920421a890dc27a0718d63adreid2227. [cleanup] Tidied up the FAQ. [RT #17121]
70b83609159f247f5920421a890dc27a0718d63adreid2226. [placeholder]
a1033a770bfee276def7d4cb9759856f69293e48trawick2225. [bug] More support for systems with no IPv4 addresses.
a1033a770bfee276def7d4cb9759856f69293e48trawick [RT #17111]
a1033a770bfee276def7d4cb9759856f69293e48trawick2224. [bug] Defer journal compaction if a xfrin is in progress.
bd2d582e0f0708b6e8e258a9a5f9a15445752087trawick [RT #17119]
bd2d582e0f0708b6e8e258a9a5f9a15445752087trawick2223. [bug] Make a new journal when compacting. [RT #17119]
adb8ad10ffc20ed06ec6cfab6cd7933ab429ea7dtrawick2222. [func] named-checkconf now checks server key references.
adb8ad10ffc20ed06ec6cfab6cd7933ab429ea7dtrawick [RT #17097]
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb2221. [bug] Set the event result code to reflect the actual
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb record turned to caller when a cache update is
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb rejected due to a more credible answer existing.
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb [RT #17017]
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb2220. [bug] win32: Address a race condition in final shutdown of
86f191e8221867df8c9cd22271e7d54204f39186rbb the Windows socket code. [RT #17028]
86f191e8221867df8c9cd22271e7d54204f39186rbb2219. [bug] Apply zone consistency checks to additions, not
86f191e8221867df8c9cd22271e7d54204f39186rbb removals, when updating. [RT #17049]
962f339c5f0f61adde79936f610fb05ce0854d6echuck2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
962f339c5f0f61adde79936f610fb05ce0854d6echuck [RT #16976]
157e6980a24a44e4719173b1c555133caecbc172stoddard2217. [func] Adjust update log levels. [RT #17092]
157e6980a24a44e4719173b1c555133caecbc172stoddard2216. [cleanup] Fix a number of errors reported by Coverity.
157e6980a24a44e4719173b1c555133caecbc172stoddard [RT #17094]
171f8c636ff1374e3a3dfff333211becda355b98trawick2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
171f8c636ff1374e3a3dfff333211becda355b98trawick2214. [bug] Deregister OpenSSL lock callback when cleaning
171f8c636ff1374e3a3dfff333211becda355b98trawick up. Reorder OpenSSL cleanup so that RAND_cleanup()
171f8c636ff1374e3a3dfff333211becda355b98trawick is called before the locks are destroyed. [RT #17098]
faa6e5d8b210456ae4dad0398dfa40a19fd89d59coar2213. [bug] SIG0 diagnostic failure messages were looking at the
faa6e5d8b210456ae4dad0398dfa40a19fd89d59coar wrong status code. [RT #17101]
faa6e5d8b210456ae4dad0398dfa40a19fd89d59coar2212. [func] 'host -m' now causes memory statistics and active
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard memory to be printed at exit. [RT 17028]
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard2211. [func] Update "dynamic update temporarily disabled" message.
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard [RT #17065]
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard2210. [bug] Deleting class specific records via UPDATE could
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard fail. [RT #17074]
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard2209. [port] osx: linking against user supplied static OpenSSL
21b8c3cb46cea2b31a585a95ce9f93f4f6abc35brbb libraries failed as the system ones were still being
bae64a3e5bf7b96d8379e24f13273f26b3b29e16coar found. [RT #17078]
bae64a3e5bf7b96d8379e24f13273f26b3b29e16coar2208. [port] win32: make sure both build methods produce the
c7fe488773cf6f50a1b2d9211c2f30a2ace8b67ccoar same output. [RT #17058]
c7fe488773cf6f50a1b2d9211c2f30a2ace8b67ccoar2207. [port] Some implementations of getaddrinfo() fail to set
c7fe488773cf6f50a1b2d9211c2f30a2ace8b67ccoar ai_canonname correctly. [RT #17061]
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb --- 9.5.0a6 released ---
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb2206. [security] "allow-query-cache" and "allow-recursion" now
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb cross inherit from each other.
853a0c44563b056e40e9cffe911190f554e63ec3chuck If allow-query-cache is not set in named.conf then
853a0c44563b056e40e9cffe911190f554e63ec3chuck allow-recursion is used if set, otherwise allow-query
853a0c44563b056e40e9cffe911190f554e63ec3chuck is used if set, otherwise the default (localnets;
853a0c44563b056e40e9cffe911190f554e63ec3chuck localhost;) is used.
330c042543440d0987244c94c65d14eeb7af0868rbb If allow-recursion is not set in named.conf then
f1fa5e69040a3a72054d185f6087a7d1592b83e8rbb allow-query-cache is used if set, otherwise allow-query
f1fa5e69040a3a72054d185f6087a7d1592b83e8rbb is used if set, otherwise the default (localnets;
f1fa5e69040a3a72054d185f6087a7d1592b83e8rbb localhost;) is used.
30e3e9b782c701f885583b7d13d8e46c37d7e1ddtrawick [RT #16987]
30e3e9b782c701f885583b7d13d8e46c37d7e1ddtrawick2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
30e3e9b782c701f885583b7d13d8e46c37d7e1ddtrawick2204. [bug] "rndc flushanme name unknown-view" caused named
27faa3af8a50c1dc2dc6cb3049722378f85e5517rbb to crash. [RT #16984]
27faa3af8a50c1dc2dc6cb3049722378f85e5517rbb2203. [security] Query id generation was cryptographically weak.
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb [RT # 16915]
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb2202. [security] The default acls for allow-query-cache and
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb allow-recursion were not being applied. [RT #16960]
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb2201. [bug] The build failed in a separate object directory.
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb [RT #16943]
865980dc9aeb61741e586502440f0c0fea4835c6trawick2200. [bug] The search for cached NSEC records was stopping to
865980dc9aeb61741e586502440f0c0fea4835c6trawick early leading to excessive DLV queries. [RT #16930]
865980dc9aeb61741e586502440f0c0fea4835c6trawick2199. [bug] win32: don't call WSAStartup() while loading dlls.
865980dc9aeb61741e586502440f0c0fea4835c6trawick [RT #16911]
865980dc9aeb61741e586502440f0c0fea4835c6trawick2198. [bug] win32: RegCloseKey() could be called when
9a0d076511763b559a755133f6a182e6c24ef643rbb RegOpenKeyEx() failed. [RT #16911]
9a0d076511763b559a755133f6a182e6c24ef643rbb2197. [bug] Add INSIST to catch negative responses which are
9a0d076511763b559a755133f6a182e6c24ef643rbb not setting the event result code appropriately.
9a0d076511763b559a755133f6a182e6c24ef643rbb [RT #16909]
b42a7e46e4f80282bd27e96d43c9510b14ccb9aarbb2196. [port] win32: yield processor while waiting for once to
b42a7e46e4f80282bd27e96d43c9510b14ccb9aarbb to complete. [RT #16958]
b42a7e46e4f80282bd27e96d43c9510b14ccb9aarbb2195. [func] dnssec-keygen now defaults to nametype "ZONE"
6501b757f710f75d47c950300d8110aca67dc0b0rbb when generating DNSKEYs. [RT #16954]
6501b757f710f75d47c950300d8110aca67dc0b0rbb2194. [bug] Close journal before calling 'done' in xfrin.c.
dfd4950edac888e671b96f62ff5382b7cb350d48rbb --- 9.5.0a5 released ---
dfd4950edac888e671b96f62ff5382b7cb350d48rbb2193. [port] win32: BINDInstall.exe is now linked statically.
dfd4950edac888e671b96f62ff5382b7cb350d48rbb [RT #16906]
a6d4b3f8d54aaf14d8ee5dda3a09bf8b6370dfa4wrowe2192. [port] win32: use vcredist_x86.exe to install Visual
c9a95767fbf0f5fb0976a06b97a256033925e433rbb Studio's redistributable dlls if building with
c9a95767fbf0f5fb0976a06b97a256033925e433rbb Visual Stdio 2005 or later.
c9a95767fbf0f5fb0976a06b97a256033925e433rbb2191. [func] named-checkzone now allows dumping to stdout (-).
21b8c3cb46cea2b31a585a95ce9f93f4f6abc35brbb named-checkconf now has -h for help.
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb named-checkzone now has -h for help.
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb rndc now has -h for help.
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb Better handling of '-?' for usage summaries.
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb [RT #16707]
9635d7ffbd8ca441f85051f9a3adba17142d0b20rbb2190. [func] Make fallback to plain DNS from EDNS due to timeouts
9635d7ffbd8ca441f85051f9a3adba17142d0b20rbb more visible. New logging category "edns-disabled".
9635d7ffbd8ca441f85051f9a3adba17142d0b20rbb [RT #16871]
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb2189. [bug] Handle socket() returning EINTR. [RT #15949]
0415e5e1b9b6eba6899a2e5ef18f8facb8db0cfbstoddard2188. [contrib] queryperf: autoconf changes to make the search for
0415e5e1b9b6eba6899a2e5ef18f8facb8db0cfbstoddard libresolv or libbind more robust. [RT #16299]
0415e5e1b9b6eba6899a2e5ef18f8facb8db0cfbstoddard2187. [bug] query_addds(), query_addwildcardproof() and
1374444b4fab1475091e12a81663f379b73005efrbb query_addnxrrsetnsec() should take a version
1374444b4fab1475091e12a81663f379b73005efrbb argument. [RT #16368]
3233d057ad276d823bded5c24c3fd6729ed1a736rbb2186. [port] cygwin: libbind: check for struct sockaddr_storage
3233d057ad276d823bded5c24c3fd6729ed1a736rbb independently of IPv6. [RT #16482]
9927a2a72d50103f32323b53f5fc4577c1801327rbb2185. [port] sunos: libbind: check for ssize_t, memmove() and
9927a2a72d50103f32323b53f5fc4577c1801327rbb memchr(). [RT #16463]
9927a2a72d50103f32323b53f5fc4577c1801327rbb2184. [bug] bind9.xsl.h didn't build out of the source tree.
9927a2a72d50103f32323b53f5fc4577c1801327rbb [RT #16830]
82d2eed8f2152aff3f7554951c133a9d404ebbc5rbb2183. [bug] dnssec-signzone didn't handle offline private keys
82d2eed8f2152aff3f7554951c133a9d404ebbc5rbb well. [RT #16832]
2e970b7ec485dde18f8fb3f494f98a3f68749859fanf2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
2e970b7ec485dde18f8fb3f494f98a3f68749859fanf could return ISC_R_SUCCESS when they ran out of
a5a7ecb732cfe89bb1f8e3c61b316c2075cefe52rbb memory. [RT #16365]
a5a7ecb732cfe89bb1f8e3c61b316c2075cefe52rbb2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
364701a102725758f2e3a511924381e2faa93e27rbb2180. [cleanup] Remove bit test from 'compress_test' as they
364701a102725758f2e3a511924381e2faa93e27rbb are no longer needed. [RT #16497]
364701a102725758f2e3a511924381e2faa93e27rbb2179. [func] 'rndc command zone' will now find 'zone' if it is
364701a102725758f2e3a511924381e2faa93e27rbb unique to all the views. [RT #16821]
0811e8a41d152f0016a385ce1dfa44f475425b70rbb2178. [bug] 'rndc reload' of a slave or stub zone resulted in
0811e8a41d152f0016a385ce1dfa44f475425b70rbb a reference leak. [RT #16867]
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb2177. [bug] Array bounds overrun on read (rcodetext) at
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb debug level 10+. [RT #16798]
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb2176. [contrib] dbus update to handle race condition during
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb initialization (Bugzilla 235809). [RT #16842]
e91c80d53d8ffa738283d923638fa3efd8aa6bf7rbb2175. [bug] win32: windows broadcast condition variable support
e91c80d53d8ffa738283d923638fa3efd8aa6bf7rbb was broken. [RT #16592]
9359bd100badb53fd8a465cb3a0a90b218b30c4cben2174. [bug] I/O errors should always be fatal when reading
9359bd100badb53fd8a465cb3a0a90b218b30c4cben master files. [RT #16825]
d0211374a981173d4537e3f919c708b5f64040fcgstein2173. [port] win32: When compiling with MSVS 2005 SP1 we also
37d15e1062df9dcdd39ebee5bd2fdc75d4a6aa4arbb --- 9.5.0a4 released ---
37d15e1062df9dcdd39ebee5bd2fdc75d4a6aa4arbb2172. [bug] query_addsoa() was being called with a non zone db.
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb [RT #16834]
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb2171. [bug] Handle breaks in DNSSEC trust chains where the parent
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb servers are not DS aware (DS queries to the parent
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb return a referral to the child).
138c8f7cb8254e035c6f45288e3909cd9c21be5cmartin2170. [func] Add acache processing to test suite. [RT #16711]
138c8f7cb8254e035c6f45288e3909cd9c21be5cmartin2169. [bug] host, nslookup: when reporting NXDOMAIN report the
138c8f7cb8254e035c6f45288e3909cd9c21be5cmartin given name and not the last name searched for.
adaea88da2d103e4302e361c932b98cee86fb1c5rbb [RT #16763]
adaea88da2d103e4302e361c932b98cee86fb1c5rbb2168. [bug] nsupdate: in non-interactive mode treat syntax errors
adaea88da2d103e4302e361c932b98cee86fb1c5rbb as fatal errors. [RT #16785]
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb2167. [bug] When re-using a automatic zone named failed to
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb attach it to the new view. [RT #16786]
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb --- 9.5.0a3 released ---
97ad13ce0413b573e63512b57c874ebbd41065b2rbb2166. [bug] When running in batch mode, dig could misinterpret
97ad13ce0413b573e63512b57c874ebbd41065b2rbb a server address as a name to be looked up, causing
2d3a1dd65798c72b7e46593614b4e27716cc5cderbb unexpected output. [RT #16743]
2d3a1dd65798c72b7e46593614b4e27716cc5cderbb2165. [func] Allow the destination address of a query to determine
2d3a1dd65798c72b7e46593614b4e27716cc5cderbb if we will answer the query or recurse.
78f2608a1583b3cb409e12be701392ad1a929653rbb allow-query-on, allow-recursion-on and
78f2608a1583b3cb409e12be701392ad1a929653rbb allow-query-cache-on. [RT #16291]
78f2608a1583b3cb409e12be701392ad1a929653rbb2164. [bug] The code to determine how named-checkzone /
c5c3b5e33fca6425dc716e1dc51c10733d9b6bc3rbb named-compilezone was called failed under windows.
c5c3b5e33fca6425dc716e1dc51c10733d9b6bc3rbb [RT #16764]
c5c3b5e33fca6425dc716e1dc51c10733d9b6bc3rbb2163. [bug] If only one of query-source and query-source-v6
be7b08f10dc6b0be088c8b41009d89ea49ad4acarbb specified a port the query pools code broke (change
be7b08f10dc6b0be088c8b41009d89ea49ad4acarbb 2129). [RT #16768]
be7b08f10dc6b0be088c8b41009d89ea49ad4acarbb2162. [func] Allow "rrset-order fixed" to be disabled at compile
2a0c3663b66c9af764267ac3c4e140e659598474ben time. [RT #16665]
2a0c3663b66c9af764267ac3c4e140e659598474ben2161. [bug] Fix which log messages are emitted for 'rndc flush'.
2a0c3663b66c9af764267ac3c4e140e659598474ben [RT #16698]
8a76b3f3c93d39930182afa227d258218f80926brbb2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
8a76b3f3c93d39930182afa227d258218f80926brbb from getifaddrs(). [RT #16708]
11d400383ba9f941cc49e1a8da562fd172d3d7c5stoddard --- 9.5.0a2 released ---
13ee9baf0119bca0739d3f17591f0bf2c64cdcccrbb2159. [bug] Array bounds overrun in acache processing. [RT #16710]
528e2a7d7cf6b8879291b59dd5afd8f6c7ae1b6brbb2158. [bug] ns_client_isself() failed to initialize key
528e2a7d7cf6b8879291b59dd5afd8f6c7ae1b6brbb leading to a REQUIRE failure. [RT #16688]
528e2a7d7cf6b8879291b59dd5afd8f6c7ae1b6brbb2157. [func] dns_db_transfernode() created. [RT #16685]
1a3161b56ebbbd036730d5372d4800cc495db212rbb2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
1a3161b56ebbbd036730d5372d4800cc495db212rbb Fix a memory leak in rbtdb.c:free_noqname().
1a3161b56ebbbd036730d5372d4800cc495db212rbb Make lookup.c:lookup_find() robust against
2d87d8f191175a0683f430d790d81a5604b74ec6rbb event leaks. [RT #16685]
2d87d8f191175a0683f430d790d81a5604b74ec6rbb2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
2d87d8f191175a0683f430d790d81a5604b74ec6rbb [RT #16694]
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb matched in acls by omitting the scope. [RT #16599]
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb2153. [bug] nsupdate could leak memory. [RT #16691]
1e8d4cfede0bad3a1a33e3b2eef0ba6754746f72rbb2152. [cleanup] Use sizeof(buf) instead of fixed number in
1e8d4cfede0bad3a1a33e3b2eef0ba6754746f72rbb dighost.c:get_trusted_key(). [RT #16678]
5600cf225f3be88ed9b5385a0737ccde7d0775bbrbb2151. [bug] Missing newline in usage message for journalprint.
5600cf225f3be88ed9b5385a0737ccde7d0775bbrbb [RT #16679]
5600cf225f3be88ed9b5385a0737ccde7d0775bbrbb2150. [bug] 'rrset-order cyclic' uniformly distribute the
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb starting point for the first response for a given
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb RRset. [RT #16655]
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb2149. [bug] isc_mem_checkdestroyed() failed to abort on
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb if there were still active memory contexts.
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb [RT #16672]
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb2148. [func] Add positive logging for rndc commands. [RT #14623]
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb2147. [bug] libbind: remove potential buffer overflow from
bcef91d7068817e2e56854f5c5b22b6eb4663a85rbb2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
bcef91d7068817e2e56854f5c5b22b6eb4663a85rbb SO_BSDCOMPAT" message. [RT #16641]
445997e06464e7625c7f0e22917f8f2d9876cfffrbb2145. [bug] Check DS/DLV digest lengths for known digests.
445997e06464e7625c7f0e22917f8f2d9876cfffrbb [RT #16622]
445997e06464e7625c7f0e22917f8f2d9876cfffrbb2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
a2c240fe8836beba2330b03d55569d9e31bb3358trawick [RT #16619]
a2c240fe8836beba2330b03d55569d9e31bb3358trawick2143. [bug] We failed to restart the IPv6 client when the
a2c240fe8836beba2330b03d55569d9e31bb3358trawick kernel failed to return the destination the
13ee9baf0119bca0739d3f17591f0bf2c64cdcccrbb packet was sent to. [RT #16613]
13ee9baf0119bca0739d3f17591f0bf2c64cdcccrbb2142. [bug] Handle master files with a modification time that
13ee9baf0119bca0739d3f17591f0bf2c64cdcccrbb matches the epoch. [RT# 16612]
5a58a10705b7b154b53294e0c0283d64eabdcb7fstoddard2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
5a58a10705b7b154b53294e0c0283d64eabdcb7fstoddard equivalent of LDH checks). [RT #16609]
3568de757bac0b47256647504c186d17ca272f85rbb2140. [bug] libbind: missing unlock on pthread_key_create()
3568de757bac0b47256647504c186d17ca272f85rbb failures. [RT #16654]
98f3c8c547839251cb43e9f917114cc8b16ced9efanf2139. [bug] dns_view_find() was being called with wrong type
98f3c8c547839251cb43e9f917114cc8b16ced9efanf in adb.c. [RT #16670]
1a411968bb62cc88c3cbf14a53caf6587c224259fanf2138. [bug] Lock order reversal in resolver.c. [RT #16653]
10a2de5cee9ae5abe675ea200fbe635a54556c8ffanf2137. [port] Mips little endian and/or mips 64 bit are now
10a2de5cee9ae5abe675ea200fbe635a54556c8ffanf supported for atomic operations. [RT#16648]
10a2de5cee9ae5abe675ea200fbe635a54556c8ffanf2136. [bug] nslookup/host looped if there was no search list
60777c94cb33363389d4848524c0809c235ba5e5rbb and the host didn't exist. [RT #16657]
b5140df3124b186e4a977812fd9828d1e295c080wrowe2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
b5140df3124b186e4a977812fd9828d1e295c080wrowe2134. [func] Additional statistics support. [RT #16666]
b5140df3124b186e4a977812fd9828d1e295c080wrowe2133. [port] powerpc: Support both IBM and MacOS Power PC
c9dafaafc2650994e47f88f5239f643c97ec4cb3wrowe assembler syntaxes. [RT #16647]
c9dafaafc2650994e47f88f5239f643c97ec4cb3wrowe2132. [bug] Missing unlock on out of memory in
c9dafaafc2650994e47f88f5239f643c97ec4cb3wrowe dns_dispatchmgr_setudp().
41aef8943f349ee0b5b510dd436301b4c33c628cwrowe2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
bb360f1d9bdce4f55f290de07a711db006b25957wrowe2130. [func] Log if CD or DO were set. [RT #16640]
5727f68f33838686d447f55a100309e54efb20f8fielding2129. [func] Provide a pool of UDP sockets for queries to be
5727f68f33838686d447f55a100309e54efb20f8fielding made over. See use-queryport-pool, queryport-pool-ports
5727f68f33838686d447f55a100309e54efb20f8fielding and queryport-pool-updateinterval. [RT #16415]
d28c69d8e5f2e88e653d61436bb6fa6302a212b4rbb2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
d28c69d8e5f2e88e653d61436bb6fa6302a212b4rbb2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
d28c69d8e5f2e88e653d61436bb6fa6302a212b4rbb2126. [security] Serialize validation of type ANY responses. [RT #16555]
b974a8fc59a9d6193305dcd8690992a411d88232rbb2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
b974a8fc59a9d6193305dcd8690992a411d88232rbb was defined. [RT #16574]
b974a8fc59a9d6193305dcd8690992a411d88232rbb2124. [security] It was possible to dereference a freed fetch
fa996ff928f6170678c8789c8073c368f56d770arbb context. [RT #16584]
fa996ff928f6170678c8789c8073c368f56d770arbb --- 9.5.0a1 released ---
fa996ff928f6170678c8789c8073c368f56d770arbb2123. [func] Use Doxygen to generate internal documentation.
fa996ff928f6170678c8789c8073c368f56d770arbb [RT #11398]
a1bbc66131c63e718e3f73fc11a348f7552d7947rbb2122. [func] Experimental http server and statistics support
a1bbc66131c63e718e3f73fc11a348f7552d7947rbb for named via xml.
b31025f6f2c0392dc76eecca7f27faad0b902be0wrowe2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
b31025f6f2c0392dc76eecca7f27faad0b902be0wrowe second timeout. [RT #16553]
b31025f6f2c0392dc76eecca7f27faad0b902be0wrowe2120. [doc] Fix markup on nsupdate man page. [RT #16556]
4783bc116b4dc37deadcc0b68ce3d3eeb6a7464aben2119. [compat] libbind: allow res_init() to succeed enough to
4783bc116b4dc37deadcc0b68ce3d3eeb6a7464aben return the default domain even if it was unable
4783bc116b4dc37deadcc0b68ce3d3eeb6a7464aben to allocate memory.
4783bc116b4dc37deadcc0b68ce3d3eeb6a7464aben2118. [bug] Handle response with long chains of domain name
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb compression pointers which point to other compression
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb pointers. [RT #16427]
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb which could lead to validation failures. named didn't
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb handle negative DS responses that were in the process
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb of being validated. Check CNAME bit before accepting
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb NODATA proof. To be able to ignore a child NSEC there
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb must be SOA (and NS) set in the bitmap. [RT #16399]
cab10c98980b42562a7850410cecd37798e170ecrbb2116. [bug] 'rndc reload' could cause the cache to continually
cab10c98980b42562a7850410cecd37798e170ecrbb be cleaned. [RT #16401]
cab10c98980b42562a7850410cecd37798e170ecrbb2115. [bug] 'rndc reconfig' could trigger a INSIST if the
71715c646d5231de578431f8961e711764b899d3fanf number of masters for a zone was reduced. [RT #16444]
71715c646d5231de578431f8961e711764b899d3fanf2114. [bug] dig/host/nslookup: searches for names with multiple
2714d6002fcdf12f5b26cc948c9f2f03ca5e7ee9rbb labels were failing. [RT #16447]
2714d6002fcdf12f5b26cc948c9f2f03ca5e7ee9rbb2113. [bug] nsupdate: if a zone is specified it should be used
2714d6002fcdf12f5b26cc948c9f2f03ca5e7ee9rbb for server discover. [RT# 16455]
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb2112. [security] Warn if weak RSA exponent is used. [RT #16460]
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb2111. [bug] Fix a number of errors reported by Coverity.
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb [RT #16507]
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
5f69f46ccdf50afd8f0a23f134746e6066185e89rbb priming queries. [RT #16491]
5f69f46ccdf50afd8f0a23f134746e6066185e89rbb2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
5f69f46ccdf50afd8f0a23f134746e6066185e89rbb2108. [func] DHCID support. [RT #16456]
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe2106. [func] 'rndc status' now reports named's version. [RT #16426]
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe2105. [func] GSS-TSIG support (RFC 3645).
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe2104. [port] Fix Solaris SMF error message.
a1e0709c89175c34a3f72eb4a83d7ee1621a0884rbb2103. [port] Add /usr/sfw to list of locations for OpenSSL
a1e0709c89175c34a3f72eb4a83d7ee1621a0884rbb under Solaris.
a1e0709c89175c34a3f72eb4a83d7ee1621a0884rbb2102. [port] Silence Solaris 10 warnings.
4b13b6bcdcfae61d3c58cc2569757651f28f2bbfrbb2101. [bug] OpenSSL version checks were not quite right.
4b13b6bcdcfae61d3c58cc2569757651f28f2bbfrbb [RT #16476]
34ea1d36f4e1c8d66338e691793017d105cc9c32rbb2100. [port] win32: copy libeay32.dll to Build\Debug.
34ea1d36f4e1c8d66338e691793017d105cc9c32rbb Copy Debug\named-checkzone to Debug\named-compilezone.
2c8f06bf370a44a3d0544ed5319355463c417132gregames2099. [port] win32: more manifest issues.
2c8f06bf370a44a3d0544ed5319355463c417132gregames2098. [bug] Race in rbtdb.c:no_references(), which occasionally
db06e09891b001667974483058923b88c3258324rbb triggered an INSIST failure about the node lock
db06e09891b001667974483058923b88c3258324rbb reference. [RT #16411]
db06e09891b001667974483058923b88c3258324rbb2097. [bug] named could reference a destroyed memory context
db06e09891b001667974483058923b88c3258324rbb after being reloaded / reconfigured. [RT #16428]
8ba9d5e9aaaa79dba0de13f5c1b6e725d98f1dc2fanf2096. [bug] libbind: handle applications that fail to detect
8ba9d5e9aaaa79dba0de13f5c1b6e725d98f1dc2fanf res_init() failures better.
26cf4d32b4ff8807a64b0cfa6865a7d6d171c68efanf2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
26cf4d32b4ff8807a64b0cfa6865a7d6d171c68efanf net_cidr_ntop_ipv6(). [RT #16388]
06c107289de0a0888386e0bc08ef9fc60aacd8bctrawick2094. [contrib] Update named-bootconf. [RT# 16404]
06c107289de0a0888386e0bc08ef9fc60aacd8bctrawick2093. [bug] named-checkzone -s was broken.
f4ab6acec7b02518869ca649ce2d3ceeb92d282etrawick2092. [bug] win32: dig, host, nslookup. Use registry config
f4ab6acec7b02518869ca649ce2d3ceeb92d282etrawick if resolv.conf does not exist or no nameservers
f4ab6acec7b02518869ca649ce2d3ceeb92d282etrawick listed. [RT #15877]
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim2091. [port] dighost.c: race condition on cleanup. [RT #16417]
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim2090. [port] win32: Visual C++ 2005 command line manifest support.
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim [RT #16417]
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim2089. [security] Raise the minimum safe OpenSSL versions to
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
0b34df54ff22d0ca05eb8e9d7c9610138a878c83rbb prior to these have known security flaws which
0b34df54ff22d0ca05eb8e9d7c9610138a878c83rbb are (potentially) exploitable in named. [RT #16391]
83047afdc49c183cdca6373dba6a0c6afa638f12gstein2088. [security] Change the default RSA exponent from 3 to 65537.
0b34df54ff22d0ca05eb8e9d7c9610138a878c83rbb [RT #16391]
c8cc46d12794845f39fa154224075a3bbe57a4c8ben2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
5dea9095cbfab622c65e5f2f806007aaa7d7761arbb [RT #16382]
5dea9095cbfab622c65e5f2f806007aaa7d7761arbb2086. [port] libbind: FreeBSD now has get*by*_r() functions.
5dea9095cbfab622c65e5f2f806007aaa7d7761arbb [RT #16403]
365c33fd9c0fc3ac27c0bd1d360a5a94980c576atrawick2085. [doc] win32: added index.html and README to zip. [RT #16201]
365c33fd9c0fc3ac27c0bd1d360a5a94980c576atrawick2084. [contrib] dbus update for 9.3.3rc2.
0ea568e49752d337d2b513cce07f2a6f4699d6eatrawick2083. [port] win32: Visual C++ 2005 support.
b7a0ad483b54711addc5f43f679189619a23c749ben2082. [doc] Document 'cache-file' as a test only option.
328d02603f471fad56cc5588fc9e93f589593ad0rbb2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
328d02603f471fad56cc5588fc9e93f589593ad0rbb [RT #16360]
1c850e9f96375578e43e5f69ba7499a543b2a7bdtrawick2080. [port] libbind: res_init.c did not compile on older versions
1c850e9f96375578e43e5f69ba7499a543b2a7bdtrawick of Solaris. [RT #16363]
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick2079. [bug] The lame cache was not handling multiple types
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick correctly. [RT #16361]
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick2078. [bug] dnssec-checkzone output style "default" was badly
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick named. It is now called "relative". [RT #16326]
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb complete signed zone. [RT #16326]
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb2076. [bug] Several files were missing #include <config.h>
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb causing build failures on OSF. [RT #16341]
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb2075. [bug] The spillat timer event hander could leak memory.
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb [RT #16357]
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
da07a882b90b44243c9cd88ac09a789999dccc4drbb dns_request_createraw2() and dns_request_createraw3()
da07a882b90b44243c9cd88ac09a789999dccc4drbb failed to send multiple UDP requests. [RT #16349]
da07a882b90b44243c9cd88ac09a789999dccc4drbb2073. [bug] Incorrect semantics check for update policy "wildcard".
da07a882b90b44243c9cd88ac09a789999dccc4drbb [RT #16353]
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb2072. [bug] We were not generating valid HMAC SHA digests.
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb [RT #16320]
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb2071. [port] Test whether gcc accepts -fno-strict-aliasing.
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb [RT #16324]
5bf029f8452b6aa105cf3d9d9b19221920725428rbb2070. [bug] The remote address was not always displayed when
5bf029f8452b6aa105cf3d9d9b19221920725428rbb reporting dispatch failures. [RT #16315]
60ed053fe71b1e3cfab8c4ed37afde30a6db4841rbb2069. [bug] Cross compiling was not working. [RT #16330]
e03878add0099ba9741efc46d545955a60ea8bdcrbb2068. [cleanup] Lower incremental tuning message to debug 1.
e03878add0099ba9741efc46d545955a60ea8bdcrbb [RT #16319]
e03878add0099ba9741efc46d545955a60ea8bdcrbb2067. [bug] 'rndc' could close the socket too early triggering
1860b2b5f1de31f8cf9d95f1b394fe98c8dbfab7rbb a INSIST under Windows. [RT #16317]
1860b2b5f1de31f8cf9d95f1b394fe98c8dbfab7rbb2066. [security] Handle SIG queries gracefully. [RT #16300]
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe2065. [bug] libbind: probe for HPUX prototypes for
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe endprotoent_r() and endservent_r(). [RT 16313]
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe2063. [bug] Change #1955 introduced a bug which caused the first
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe 'rndc flush' call to not free memory. [RT #16244]
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick2062. [bug] 'dig +nssearch' was reusing a buffer before it had
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick been returned by the socket code. [RT #16307]
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick2061. [bug] Accept expired wildcard message reversed. [RT #16296]
77c656dabf05adcdee0d30b15b4628be738a1913rbb2060. [bug] Enabling DLZ support could leave views partially
77c656dabf05adcdee0d30b15b4628be738a1913rbb configured. [RT #16295]
77c656dabf05adcdee0d30b15b4628be738a1913rbb2059. [bug] Search into cache rbtdb could trigger an INSIST
77c656dabf05adcdee0d30b15b4628be738a1913rbb failure while cleaning up a stale rdataset.
7e73041858979fd162c849cc2e7447beb51eedf8rbb [RT #16292]
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb2058. [bug] Adjust how we calculate rtt estimates in the presence
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb of authoritative servers that drop EDNS and/or CD
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb requests. Also fallback to EDNS/512 and plain DNS
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick faster for zones with less than 3 servers. [RT #16187]
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb2057. [bug] Make setting "ra" dependent on both allow-query-cache
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb and allow-recursion. [RT #16290]
ce121a776564df6bb75498209094142d92404b8atrawick2056. [bug] dig: ixfr= was not being treated case insensitively
ce121a776564df6bb75498209094142d92404b8atrawick at all times. [RT #15955]
e1ade9256c87684358786fcf7eef251bd4c1db10rbb2055. [bug] Missing goto after dropping multicast query.
e1ade9256c87684358786fcf7eef251bd4c1db10rbb [RT #15944]
e1ade9256c87684358786fcf7eef251bd4c1db10rbb2054. [port] freebsd: do not explicitly link against -lpthread.
e1ade9256c87684358786fcf7eef251bd4c1db10rbb [RT #16170]
db9ac238bf63d7df2bebbaff4de1628a32151028trawick2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
db9ac238bf63d7df2bebbaff4de1628a32151028trawick2052. [bug] 'rndc' improve connect failed message to report
eae32ab3fb398ca408bc2d45b22adf1b67a75471rbb the failing address. [RT #15978]
d1d25826dbd7d2ba97db90b77122ae2b0f363e89rbb2051. [port] More strtol() fixes. [RT #16249]
d1d25826dbd7d2ba97db90b77122ae2b0f363e89rbb2050. [bug] Parsing of NSAP records was not case insensitive.
42ec91fadb5532438ab4c02993b15c18a517967frbb [RT #16287]
42ec91fadb5532438ab4c02993b15c18a517967frbb2049. [bug] Restore SOA before AXFR when falling back from
42ec91fadb5532438ab4c02993b15c18a517967frbb a attempted IXFR when transferring in a zone.
42ec91fadb5532438ab4c02993b15c18a517967frbb Allow a initial SOA query before attempting
96fc773162e93e5b85686ab152f11baf4498d868rbb a AXFR to be requested. [RT #16156]
2975523a2901fc601ae9510082a7d4fb11bb9aecake2048. [bug] It was possible to loop forever when using
2975523a2901fc601ae9510082a7d4fb11bb9aecake avoid-v4-udp-ports / avoid-v6-udp-ports when
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick the OS always returned the same local port.
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick [RT #16182]
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick2047. [bug] Failed to initialize the interface flags to zero.
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick [RT #16245]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe cleanup [RT #16247].
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe2045. [func] Use lock buckets for acache entries to limit memory
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe consumption. [RT #16183]
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe2044. [port] Add support for atomic operations for Itanium.
f6e9f5600e77b78fb013bb543d364135961639d1rbb [RT #16179]
f6e9f5600e77b78fb013bb543d364135961639d1rbb2043. [port] nsupdate/nslookup: Force the flushing of the prompt
f6e9f5600e77b78fb013bb543d364135961639d1rbb for interactive sessions. [RT#16148]
f6e9f5600e77b78fb013bb543d364135961639d1rbb2042. [bug] named-checkconf was incorrectly rejecting the
f6e9f5600e77b78fb013bb543d364135961639d1rbb logging category "config". [RT #16117]
f6e9f5600e77b78fb013bb543d364135961639d1rbb2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
f6e9f5600e77b78fb013bb543d364135961639d1rbb set of libraries to be linked. [RT #16129]
b580e99ec29c68e3c56b5b1ad8a4ec1e2de865c0trawick2040. [bug] rbtdb no_references() could trigger an INSIST
b580e99ec29c68e3c56b5b1ad8a4ec1e2de865c0trawick failure with --enable-atomic. [RT #16022]
b580e99ec29c68e3c56b5b1ad8a4ec1e2de865c0trawick2039. [func] Check that all buffers passed to the socket code
b580e99ec29c68e3c56b5b1ad8a4ec1e2de865c0trawick have been retrieved when the socket event is freed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16122]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2038. [bug] dig/nslookup/host was unlinking from wrong list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when handling errors. [RT #16122]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2037. [func] When unlinking the first or last element in a list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding check that the list head points to the element to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be unlinked. [RT #15959]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16075]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2035. [func] Make falling back to TCP on UDP refresh failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding optional. Default "try-tcp-refresh yes;" for BIND 8
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatibility. [RT #16123]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2033. [bug] We weren't creating multiple client memory contexts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on demand as expected. [RT #16095]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2031. [bug] Emit a error message when "rndc refresh" is called on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a non slave/stub zone. [RT # 16073]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2030. [bug] We were being overly conservative when disabling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding openssl engine support. [RT #16030]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2029. [bug] host printed out the server multiple times when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified on the command line. [RT #15992]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2028. [port] linux: socket.c compatibility for old systems.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16015]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2027. [port] libbind: Solaris x86 support. [RT #16020]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2026. [bug] Rate limit the two recursive client exceeded messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16044]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2025. [func] Update "zone serial unchanged" message. [RT #16026]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2024. [bug] named emitted spurious "zone serial unchanged"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages on reload. [RT #16027]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2023. [bug] "make install" should create ${localstatedir}/run and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ${sysconfdir} if they do not exist. [RT #16033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2022. [bug] If dnssec validation is disabled only assert CD if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CD was requested. [RT #16037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2019. [tuning] Reduce the amount of work performed per quantum
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when cleaning the cache. [RT #15986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2018. [bug] Checking if the HMAC MD5 private file was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2017. [bug] allow-query default was not correct. [RT #15946]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2016. [bug] Return a partial answer if recursion is not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allowed but requested and we had the answer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the original qname. [RT #15945]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2015. [cleanup] use-additional-cache is now acache-enable for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consistency. Default acache-enable off in BIND 9.4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as it requires memory usage to be configured.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding It may be enabled by default in BIND 9.5 once we
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have more experience with it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2014. [func] Statistics about acache now recorded and sent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to log. [RT #15976]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses more gracefully. [RT #15941]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2012. [func] Don't insert new acache entries if acache is full.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2011. [func] dnssec-signzone can now update the SOA record of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the signed zone, either as an increment or as the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding system time(). [RT #15633]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2010. [placeholder] rt15958
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2009. [bug] libbind: Coverity fixes. [RT #15808]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2008. [func] It is now possible to enable/disable DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation from rndc. This is useful for the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding mobile hosts where the current connection point
cfa64348224b66dd1c9979b809406c4d15b1c137fielding breaks DNSSEC (firewall/proxy). [RT #15592]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc validation newstate [view]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2007. [func] It is now possible to explicitly enable DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation. default dnssec-validation no; to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be changed to yes in 9.5.0. [RT #15674]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2006. [security] Allow-query-cache and allow-recursion now default
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the built in acls "localnets" and "localhost".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This is being done to make caching servers less
cfa64348224b66dd1c9979b809406c4d15b1c137fielding attractive as reflective amplifying targets for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding spoofed traffic. This still leave authoritative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers exposed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The best fix is for full BCP 38 deployment to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding remove spoofed traffic.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2005. [bug] libbind: Retransmission timeouts should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding based on which attempt it is to the nameserver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and not the nameserver itself. [RT #13548]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2004. [bug] dns_tsig_sign() could pass a NULL pointer to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dst_context_destroy() when cleaning up after a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. [RT #15835]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2003. [bug] libbind: The DNS name/address lookup functions could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding occasionally follow a random pointer due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding structures not being completely zeroed. [RT #15806]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2002. [bug] libbind: tighten the constraints on when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding struct addrinfo._ai_pad exists. [RT #15783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2001. [func] Check the KSK flag when updating a secure dynamic zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New zone option "update-check-ksk yes;". [RT #15817]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1999. [func] Implement "rrset-order fixed". [RT #13662]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1998. [bug] Restrict handling of fifos as sockets to just SunOS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This allows named to connect to entropy gathering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding daemons that use fifos instead of sockets. [RT #15840]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1997. [bug] Named was failing to replace negative cache entries
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a positive one for the type was learnt.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15818]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1996. [bug] nsupdate: if a zone has been specified it should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding appear in the output of 'show'. [RT #15797]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1995. [bug] 'host' was reporting multiple "is an alias" messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15702]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1994. [port] OpenSSL 0.9.8 support. [RT #15694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1993. [bug] Log messages, via syslog, were missing the space
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after the timestamp if "print-time yes" was specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15844]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1992. [bug] Not all incoming zone transfer messages included the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding view. [RT #15825]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1991. [cleanup] The configuration data, once read, should be treated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as read only. Expand the use of const to enforce this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at compile time. [RT #15813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1990. [bug] libbind: isc's override of broken gettimeofday()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementations was not always effective.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15709]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1989. [bug] win32: don't check the service password when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding re-installing. [RT #15882]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1988. [bug] Remove a bus error from the SHA256/SHA512 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15878]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1986. [func] Report when a zone is removed. [RT #15849]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1985. [protocol] DLV has now been assigned a official type code of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 32769. [RT #15807]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: care should be taken to ensure you upgrade
cfa64348224b66dd1c9979b809406c4d15b1c137fielding both named and dnssec-signzone at the same time for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones with DLV records where named is the master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server for the zone. Also any zones that contain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DLV records should be removed when upgrading a slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone. You do not however have to upgrade all
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers for a zone with DLV records simultaneously.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1984. [func] dig, nslookup and host now advertise a 4096 byte
cfa64348224b66dd1c9979b809406c4d15b1c137fielding EDNS UDP buffer size by default. [RT #15855]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1983. [func] Two new update policies. "selfsub" and "selfwild".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12895]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1982. [bug] DNSKEY was being accepted on the parent side of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a delegation. KEY is still accepted there for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RFC 3007 validated updates. [RT #15620]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1981. [bug] win32: condition.c:wait() could fail to reattain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the mutex lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1980. [func] dnssec-signzone: output the SOA record as the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding first record in the signed zone. [RT #15758]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1979. [port] linux: allow named to drop core after changing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding user ids. [RT #15753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1978. [port] Handle systems which have a broken recvmsg().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15742]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1977. [bug] Silence noisy log message. [RT #15704]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1975. [bug] libbind: isc_gethexstring() could misparse multi-line
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hex strings with comments. [RT #15814]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1974. [doc] List each of the zone types and associated zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options separately in the ARM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding HMACSHA512 support. [RT #13606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1972. [contrib] DBUS dynamic forwarders integration from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Jason Vas Dias <jvdias@redhat.com>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1971. [port] linux: make detection of missing IF_NAMESIZE more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding robust. [RT #15443]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1970. [bug] nsupdate: adjust UDP timeout when falling back to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unsigned SOA query. [RT #15775]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1969. [bug] win32: the socket code was freeing the socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding structure too early. [RT #15776]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1966. [bug] Don't set CD when we have fallen back to plain DNS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15727]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1965. [func] Suppress spurious "recursion requested but not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available" warning with 'dig +qr'. [RT #15780].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1963. [port] Tru64 4.0E doesn't support send() and recv().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15586]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1962. [bug] Named failed to clear old update-policy when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was removed. [RT #15491]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1961. [bug] Check the port and address of responses forwarded
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to dispatch. [RT #15474]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15465]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1959. [func] Control the zeroing of the negative response TTL to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a soa query. Defaults "zero-no-soa-ttl yes;" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "zero-no-soa-ttl-cache no;". [RT #15460]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1958. [bug] Named failed to update the zone's secure state
cfa64348224b66dd1c9979b809406c4d15b1c137fielding until the zone was reloaded. [RT #15412]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1957. [bug] Dig mishandled responses to class ANY queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15402]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1956. [bug] Improve cross compile support, 'gen' is now built
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by native compiler. See README for additional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cross compile support information. [RT #15148]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1954. [func] Named now falls back to advertising EDNS with a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 512 byte receive buffer if the initial EDNS queries
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail. [RT #14852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1953. [func] The maximum EDNS UDP response named will send can
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now be set in named.conf (max-udp-size). This is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding independent of the advertised receive buffer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (edns-udp-size). [RT #14852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1952. [port] hpux: tell the linker to build a runtime link
cfa64348224b66dd1c9979b809406c4d15b1c137fielding path "-Wl,+b:". [RT #14816].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1951. [security] Drop queries from particular well known ports.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Don't return FORMERR to queries from particular
cfa64348224b66dd1c9979b809406c4d15b1c137fielding well known ports. [RT #15636]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a TCP socket. This prevents the source address being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set for TCP connections. [RT #15628]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1949. [func] Addition memory leakage checks. [RT #15544]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1948. [bug] If was possible to trigger a REQUIRE failure in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding xfrin.c:maybe_free() if named ran out of memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15568]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1947. [func] It is now possible to configure named to accept
cfa64348224b66dd1c9979b809406c4d15b1c137fielding expired RRSIGs. Default "dnssec-accept-expired no;".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Setting "dnssec-accept-expired yes;" leaves named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding vulnerable to replay attacks. [RT #14685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1946. [bug] resume_dslookup() could trigger a REQUIRE failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when using forwarders. [RT #15549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding To generate a RSAMD5 key you must explicitly request
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RSAMD5. [RT #13780]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1944. [cleanup] isc_hash_create() does not need a read/write lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15522]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1943. [bug] Set the loadtime after rolling forward the journal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15647]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1942. [bug] If the name of a DNSKEY match that of one in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trusted-keys do not attempt to validate the DNSKEY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using the parents DS RRset. [RT #15649]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1941. [bug] ncache_adderesult() should set eresult even if no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataset is passed to it. [RT #15642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1940. [bug] Fixed a number of error conditions reported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1939. [bug] The resolver could dereference a null pointer after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation if all the queries have timed out.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15528]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1938. [bug] The validator was not correctly handling unsecure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative responses at or below a SEP. [RT #15528]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1936. [bug] The validator could leak memory. [RT #15544]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1935. [bug] 'acache' was DO sensitive. [RT #15430]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1934. [func] Validate pending NS RRsets, in the authority section,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prior to returning them if it can be done without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requiring DNSKEYs to be fetched. [RT #15430]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1931. [bug] Per-client mctx could require a huge amount of memory,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding particularly for a busy caching server. [RT #15519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1930. [port] HPUX: ia64 support. [RT #15473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1927. [bug] Access to soanode or nsnode in rbtdb violated the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lock order rule and could cause a dead lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT# 15518]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1926. [bug] The Windows installer did not check for empty
cfa64348224b66dd1c9979b809406c4d15b1c137fielding passwords. BINDinstall was being installed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the wrong place. [RT #15483]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1925. [port] All outer level AC_TRY_RUNs need cross compiling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defaults. [RT #15469]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1924. [port] libbind: hpux ia64 support. [RT #15473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1923. [bug] ns_client_detach() called too early. [RT #15499]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1922. [bug] check-tool.c:setup_logging() missing call to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_log_setcontext().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1921. [bug] Client memory contexts were not using internal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding malloc. [RT# 15434]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1920. [bug] The cache rbtdb lock array was too small to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have the desired performance characteristics.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15454]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1919. [contrib] queryperf: a set of new features: collecting/printing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response delays, printing intermediate results, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adjusting query rate for the "target" qps.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1918. [bug] Memory leak when checking acls. [RT #15391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when generating man pages. [RT #15385]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1915. [bug] dig +ndots was broken. [RT #15215]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1914. [protocol] DS is required to accept mnemonic algorithms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (RFC 4034). Still emit numeric algorithms for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatibility with RFC 3658. [RT #15354]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1913. [func] Integrate contributed DLZ code into named. [RT #11382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1912. [port] aix: atomic locking for powerpc. [RT #15020]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1911. [bug] Update windows socket code. [RT #14965]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1910. [bug] dig's +sigchase code overhauled. [RT #14933]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1909. [bug] The DLV code has been re-worked to make no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query order sensitive. [RT #14933]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1908. [func] dig now warns if 'RA' is not set in the answer when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'RD' was set in the query. host/nslookup skip servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that fail to set 'RA' when 'RD' is set unless a server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is explicitly set. [RT #15005]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15006]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1906. [func] dig now has a '-q queryname' and '+showsearch' options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15034]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1905. [bug] Strings returned from cfg_obj_asstring() should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding treated as read-only. The prototype for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cfg_obj_asstring() has been updated to reflect this.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding friends. Note: RFC 1918 zones are not yet covered by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this but are likely to be in a future release.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New options: empty-server, empty-contact,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding empty-zones-enable and disable-empty-zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1903. [func] ISC string copy API.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1902. [func] Attempt to make the amount of work performed in a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding iteration self tuning. The covers nodes clean from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the cache per iteration, nodes written to disk when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rewriting a master file and nodes destroyed per
cfa64348224b66dd1c9979b809406c4d15b1c137fielding iteration when destroying a zone or a cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14996]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1901. [cleanup] Don't add DNSKEY records to the additional section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1900. [bug] ixfr-from-differences failed to ensure that the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding serial number increased. [RT #15036]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1899. [func] named-checkconf now validates update-policy entries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14963]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_NETADDR_FORMATSIZE to allow for scope details.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1897. [func] x86 and x86_64 now have separate atomic locking
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementations.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1896. [bug] Recursive clients soft quota support wasn't working
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as expected. [RT #15103]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1895. [bug] A escaped character is, potentially, converted to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the output character set too early. [RT #14666]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1894. [doc] Review ARM for BIND 9.4.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1893. [port] Use uintptr_t if available. [RT #14606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1892. [func] Support for SPF rdata type. [RT #15033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1891. [port] freebsd: pthread_mutex_init can fail if it runs out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory. [RT #14995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1890. [func] Raise the UDP receive buffer size to 32k if it is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding less than 32k. [RT #14953]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1889. [port] sunos: non blocking i/o support. [RT #14951]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1888. [func] Support for IPSECKEY rdata type. [RT #14967]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1887. [bug] The cache could delete expired records too fast for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clients with a virtual time in the past. [RT #14991]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1886. [bug] fctx_create() could return success even though it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed. [RT #14993]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1885. [func] dig: report the number of extra bytes still left in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the packet after processing all the records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
cfa64348224b66dd1c9979b809406c4d15b1c137fielding levels. [RT #14962]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1882. [func] Limit the number of recursive clients that can be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding waiting for a single query (<qname,qtype,qclass>) to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolve. New options clients-per-query and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-clients-per-query.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1881. [func] Add a system test for named-checkconf. [RT #14931]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1880. [func] The lame cache is now done on a <qname,qclass,qtype>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding basis as some servers only appear to be lame for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding certain query types. [RT #14916]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14892]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1878. [func] Detect duplicates of UDP queries we are recursing on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and drop them. New stats category "duplicate".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1877. [bug] Fix unreasonably low quantum on call to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rbt_destroy2(). Remove unnecessary unhash_node()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding call. [RT #14919]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1876. [func] Additional memory debugging support to track size
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and mctx arguments. [RT #14814]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1875. [bug] process_dhtkey() was using the wrong memory context
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to free some memory. [RT #14890]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1874. [port] sunos: portability fixes. [RT #14814]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1873. [port] win32: isc__errno2result() now reports its caller.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1871. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1870. [func] Added framework for handling multiple EDNS versions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14873]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1869. [func] dig can now specify the EDNS version when making
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a query. [RT #14873]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1868. [func] edns-udp-size can now be overridden on a per
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server basis. [RT #14851]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1867. [bug] It was possible to trigger a INSIST in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dlv_validatezonekey(). [RT #14846]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1866. [bug] resolv.conf parse errors were being ignored by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bad addresses. [RT #14841]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1864. [bug] Don't try the alternative transfer source if you
cfa64348224b66dd1c9979b809406c4d15b1c137fielding got a answer / transfer with the main source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address. [RT #14802]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1863. [bug] rrset-order "fixed" error messages not complete.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1862. [func] Add additional zone data constancy checks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-checkzone has extended checking of NS, MX and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SRV record and the hosts they reference.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named has extended post zone load checks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New zone options: check-mx and integrity-check.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1861. [bug] dig could trigger a INSIST on certain malformed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses. [RT #14801]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrectly set. [RT #14775]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1859. [func] Add support for CH A record. [RT #14695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1858. [bug] The flush-zones-on-shutdown option wasn't being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parsed. [RT #14686]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1857. [bug] named could trigger a INSIST() if reconfigured /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reloaded too fast. [RT #14673]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1855. [bug] ixfr-from-differences was failing to detect changes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of ttl due to dns_diff_subtract() was ignoring the ttl
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of records. [RT #14616]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1854. [bug] lwres also needs to know the print format for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (long long). [RT #13754]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1853. [bug] Rework how DLV interacts with proveunsecure().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13605]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1852. [cleanup] Remove last vestiges of dnssec-signkey and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-makekeyset (removed from Makefile years ago).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1851. [doc] Doxygen comment markup. [RT #11398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1849. [doc] All forms of the man pages (docbook, man, html) should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have consistent copyright dates.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1848. [bug] Improve SMF integration. [RT #13238]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1847. [bug] isc_ondestroy_init() is called too late in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rbtdb_create()/dns_rbtdb64_create().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13661]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <bortzmeyer@nic.fr>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1845. [bug] Improve error reporting to distinguish between
cfa64348224b66dd1c9979b809406c4d15b1c137fielding accept()/fcntl() and socket()/fcntl() errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13745]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for each 16 bit piece of the IPv6 address. The text
cfa64348224b66dd1c9979b809406c4d15b1c137fielding representation of a IPv6 address has been tightened
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when CFLAGS contains "-I /usr/local/include"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in old header files being used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1842. [port] cmsg_len() could produce incorrect results on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some platform. [RT #13744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1841. [bug] "dig +nssearch" now makes a recursive query to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding find the list of nameservers to query. [RT #13694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1840. [func] dnssec-signzone can now randomize signature end times
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (dnssec-signzone -j jitter). [RT #13609]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1839. [bug] <isc/hash.h> was not being installed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1838. [cleanup] Don't allow Linux capabilities to be inherited.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13707]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1837. [bug] Compile time option ISC_FACILITY was not effective
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for 'named -u <user>'. [RT #13714]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1836. [cleanup] Silence compiler warnings in hash_test.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1834. [bug] Bad memset in rdata_test.c. [RT #13658]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13620]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1831. [doc] Update named-checkzone documentation. [RT#13604]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1829. [bug] win32: "pid-file none;" broken. [RT #13563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1828. [bug] isc_rwlock_init() failed to properly cleanup if it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding encountered a error. [RT #13549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1827. [bug] host: update usage message for '-a'. [RT #37116]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory error. [RT #13537]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1825. [bug] Missing UNLOCK() on out of memory error from in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rbtdb.c:subtractrdataset(). [RT #13519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1824. [bug] Memory leak on dns_zone_setdbtype() failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13510]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1823. [bug] Wrong macro used to check for point to point interface.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1822. [bug] check-names test for RT was reversed. [RT #13382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1821. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1820. [bug] Gracefully handle acl loops. [RT #13659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1819. [bug] The validator needed to check both the algorithm and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding digest types of the DS to determine if it could be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used to introduce a secure zone. [RT #13593]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1817. [func] Add support for additional zone file formats for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding improving loading performance. The masterfile-format
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option in named.conf can be used to specify a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-default format. A separate command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-compilezone was provided to generate zone files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the new format. Additionally, the -I and -O options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for dnssec-signzone specify the input and output
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13597]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1815. [bug] nsupdate triggered a REQUIRE if the server was set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without also setting the zone and it encountered
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a CNAME and was using TSIG. [RT #13086]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1814. [func] UNIX domain controls are now supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1813. [func] Restructured the data locking framework using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding architecture dependent atomic operations (when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available), improving response performance on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multi-processor machines significantly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding x86, x86_64, alpha, powerpc, and mips are currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13453]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1811. [func] Preserve the case of domain names in rdata during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone transfers. [RT #13547]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1810. [bug] configure, lib/bind/configure make different default
cfa64348224b66dd1c9979b809406c4d15b1c137fielding decisions about whether to do a threaded build.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13212]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1809. [bug] "make distclean" failed for libbind if the platform
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1808. [bug] zone.c:notify_zone() contained a race condition,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone->db could change underneath it. [RT #13511]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1807. [bug] When forwarding (forward only) set the active domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the forward zone name. [RT #13526]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1806. [bug] The resolver returned the wrong result when a CNAME /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNAME was encountered when fetching glue from a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding secure namespace. [RT #13501]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1805. [bug] Pending status was not being cleared when DLV was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding active. [RT #13501]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1804. [bug] Ensure that if we are queried for glue that it fits
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the additional section or TC is set to tell the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding client to retry using TCP. [RT #10114]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1803. [bug] dnssec-signzone sometimes failed to remove old
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRSIGs. [RT #13483]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1802. [bug] Handle connection resets better. [RT #11280]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1801. [func] Report differences between hints and real NS rrset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and associated address records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1800. [bug] Changes #1719 allowed a INSIST to be triggered.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13428]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1799. [bug] 'rndc flushname' failed to flush negative cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding entries. [RT #13438]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1798. [func] The server syntax has been extended to support a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding range of servers. [RT #11132]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1797. [func] named-checkconf now check acls to verify that they
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only refer to existing acls. [RT #13101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1795. [bug] "rndc dumpdb" was not fully documented. Minor
cfa64348224b66dd1c9979b809406c4d15b1c137fielding formating issues with "rndc dumpdb -all". [RT #13396]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1794. [func] Named and named-checkzone can now both check for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-terminal wildcard records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1793. [func] Extend adjusting TTL warning messages. [RT #13378]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1792. [func] New zone option "notify-delay". Specify a minimum
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delay between sets of NOTIFY messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1791. [bug] 'host -t a' still printed out AAAA and MX records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow parallel make to succeed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1789. [bug] Prerequisite test for tkey and dnssec could fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with "configure --with-libtool".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1788. [bug] libbind9.la/libbind9.so needs to link against
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1786. [port] AIX: libt_api needs to be taught to look for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding T_testlist in the main executable (--with-libtool).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13239]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1785. [bug] libbind9.la/libbind9.so needs to link against
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1784. [cleanup] "libtool -allow-undefined" is the default.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Leave hooks in configure to allow it to be set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if needed in the future.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source tree.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1782. [port] OSX: --with-libtool + --enable-libbind broke on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding __evOptMonoTime. [RT #13219]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1780. [bug] Update libtool to 1.5.10.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_LOOPBACK_INIT macros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_LOOPBACK_INIT macros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_LOOPBACK_INIT macros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1774. [port] Aix: Silence compiler warnings / build failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1773. [bug] Fast retry on host / net unreachable. [RT #13153]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1772. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1771. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1770. [bug] named-checkconf failed to report missing a missing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file clause for rbt{64} master/hint zones. [RT#13009]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1769. [port] win32: change compiler flags /MTd ==> /MDd,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding /MT ==> /MD.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataset. [RT #12907]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support for (struct in6_pktinfo) failed. [RT #13077]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1766. [bug] Update the master file timestamp on successful refresh
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as well as the journal's timestamp. [RT# 13062]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1765. [bug] configure --with-openssl=auto failed. [RT #12937]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1764. [bug] dns_zone_replacedb failed to emit a error message
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if there was no SOA record in the replacement db.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13016]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1763. [func] Perform sanity checks on NS records which refer to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'in zone' names. [RT #13002]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding even when it failed. [RT #12995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12971]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1760. [bug] Host / net unreachable was not penalising rtt
cfa64348224b66dd1c9979b809406c4d15b1c137fielding estimates. [RT #12970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1759. [bug] Named failed to startup if the OS supported IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but had no IPv6 interfaces configured. [RT #12942]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1758. [func] Don't send notify messages to self. [RT #12933]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1757. [func] host now can turn on memory debugging flags with '-m'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1756. [func] named-checkconf now checks the logging configuration.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12352]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1755. [func] allow-update is now settable at the options / view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level. [RT #6636]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1754. [bug] We weren't always attempting to query the parent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server for the DS records at the zone cut.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12774]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1753. [bug] Don't serve a slave zone which has no NS records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12894]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1752. [port] Move isc_app_start() to after ns_os_daemonise()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as some fork() implementations unblock the signals
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that are blocked by isc_app_start(). [RT #12810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12864]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1749. [bug] 'check-names response ignore;' failed to ignore.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12866]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1748. [func] dig now returns the byte count for axfr/ixfr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1747. [bug] BIND 8 compatibility: named/named-checkconf failed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to parse "host-statistics-max" in named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1746. [func] Make public the function to read a key file,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dst_key_read_public(). [RT #12450]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1745. [bug] Dig/host/nslookup accept replies from link locals
cfa64348224b66dd1c9979b809406c4d15b1c137fielding regardless of scope if no scope was specified when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query was sent. [RT #12745]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1744. [bug] If tuple2msgname() failed to convert a tuple to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a name a REQUIRE could be triggered. [RT #12796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1743. [bug] If isc_taskmgr_create() was not able to create the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requested number of worker threads then destruction
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the manager would trigger an INSIST() failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12790]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1742. [bug] Deleting all records at a node then adding a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding previously existing record, in a single UPDATE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transaction, failed to leave / regenerate the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding associated RRSIG records. [RT #12788]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1741. [bug] Deleting all records at a node in a secure zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using a update-policy grant failed. [RT #12787]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1740. [bug] Replace rbt's hash algorithm as it performed badly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with certain zones. [RT #12729]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NOTE: a hash context now needs to be established
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via isc_hash_create() if the application was not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding already doing this.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1739. [bug] dns_rbt_deletetree() could incorrectly return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_R_QUOTA. [RT #12695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1738. [bug] Enable overrun checking by default. [RT #12695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1737. [bug] named failed if more than 16 masters were specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12627]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1736. [bug] dst_key_fromnamedfile() could fail to read a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding public key. [RT #12687]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RE #12688]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1733. [bug] Return non-zero exit status on initial load failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12658]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12467]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1731. [port] darwin: relax version test in ifconfig.sh.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12581]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1730. [port] Determine the length type used by the socket API.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12581]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1729. [func] Improve check-names error messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1728. [doc] Update check-names documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1727. [bug] named-checkzone: check-names support didn't match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1726. [port] aix5: add support for aix5.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1725. [port] linux: update error message on interaction of threads,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding capabilities and setuid support (named -u). [RT #12541]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1724. [bug] Look for DNSKEY records with "dig +sigtrace".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12557]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1722. [bug] Don't commit the journal on malformed ixfr streams.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1721. [bug] Error message from the journal processing were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding always identifying the relevant journal. [RT #12519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative response. [RT #12506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1719. [bug] named was not correctly caching a RFC 2308 Type 1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative response. [RT #12506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses when looking for the zone / master server.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1717. [port] solaris: ifconfig.sh did not support Solaris 10.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "ifconfig.sh down" didn't work for Solaris 9.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1716. [doc] named.conf(5) was being installed in the wrong
cfa64348224b66dd1c9979b809406c4d15b1c137fielding location. [RT# 12441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1715. [func] 'dig +trace' now randomly selects the next servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to try. Report if there is a bad delegation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1714. [bug] dig/host/nslookup were only trying the first
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address when a nameserver was specified by name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12286]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1713. [port] linux: extend capset failure message to say:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding please ensure that the capset kernel module is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loaded. see insmod(8)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages for the specified zone. [RT #9479]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1709. [port] solaris: add SMF support from Sun.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for conformance to the name space convention. Binary
cfa64348224b66dd1c9979b809406c4d15b1c137fielding backward compatibility to the old function name is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding provided. [RT #12376]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1707. [contrib] sdb/ldap updated to version 1.0-beta.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1706. [bug] 'rndc stop' failed to cause zones to be flushed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sometimes. [RT #12328]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1705. [func] Allow the journal's name to be changed via named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1704. [port] lwres needed a snprintf() implementation for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding platforms without snprintf(). Add missing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "#include <isc/print.h>". [RT #12321]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1703. [bug] named would loop sending NOTIFY messages when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to receive a response. [RT #12322]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1702. [bug] also-notify should not be applied to built in zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12323]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1701. [doc] A minimal named.conf man page.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1700. [func] nslookup is no longer to be treated as deprecated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Remove "deprecated" warning message. Add man page.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1699. [bug] dnssec-signzone can generate "not exact" errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when resigning. [RT #12281]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1698. [doc] Use reserved IPv6 documentation prefix.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1697. [bug] xxx-source{,-v6} was not effective when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified one of listening addresses and a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding different port than the listening port. [RT #12257]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1696. [bug] dnssec-signzone failed to clean out nodes that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consisted of only NSEC and RRSIG records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1695. [bug] DS records when forwarding require special handling.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1694. [bug] Report if the builtin views of "_default" / "_bind"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are defined in named.conf. [RT #12023]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1693. [bug] max-journal-size was not effective for master zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with ixfr-from-differences set. [RT# 12024]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding /usr/lib. [RT #11971]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1691. [bug] sdb's attachversion was not complete. [RT #11990]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1690. [bug] Delay detaching view from the client until UPDATE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding processing completes when shutting down. [RT #11714]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contained gratuitous semicolons. [RT #11707]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1688. [bug] LDFLAGS was not supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1687. [bug] Race condition in dispatch. [RT #10272]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1686. [bug] Named sent a extraneous NOTIFY when it received a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding redundant UPDATE request. [RT #11943]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1685. [bug] Change #1679 loop tests weren't quite right.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1684. [func] ixfr-from-differences now takes master and slave in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addition to yes and no at the options and view levels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1683. [bug] dig +sigchase could leak memory. [RT #11445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1682. [port] Update configure test for (long long) printf format.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1681. [bug] Only set SO_REUSEADDR when a port is specified in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_socket_bind(). [RT #11742]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1680. [func] rndc: the source address can now be specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1679. [bug] When there was a single nameserver with multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses for a zone not all addresses were tried.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11706]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1676. [func] New option "allow-query-cache". This lets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query be used to specify the default zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding access level rather than having to have every
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone override the global value. allow-query-cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can be set at both the options and view levels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding If allow-query-cache is not set allow-query applies.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1675. [bug] named would sometimes add extra NSEC records to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the authority section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1674. [port] linux: increase buffer size used to scan
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1673. [port] linux: issue a error messages if IPv6 interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding scans fails.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1672. [cleanup] Tests which only function in a threaded build
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now return R:THREADONLY (rather than R:UNTESTED)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a non-threaded build.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1671. [contrib] queryperf: add NAPTR to the list of known types.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1670. [func] Log UPDATE requests to slave zones without an acl as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "disabled" at debug level 3. [RT# 11657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1669. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1667. [port] linux: not all versions have IF_NAMESIZE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1666. [bug] The optional port on hostnames in dual-stack-servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was being ignored.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1665. [func] rndc now allows addresses to be set in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server clauses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1663. [func] Look for OpenSSL by default.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1662. [bug] Change #1658 failed to change one use of 'type'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 'keytype'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1661. [bug] Restore dns_name_concatenate() call in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adb.c:set_target(). [RT #11582]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1660. [bug] win32: connection_reset_fix() was being called
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unconditionally. [RT #11595]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1659. [cleanup] Cleanup some messages that were referring to KEY vs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY, NXT vs NSEC and SIG vs RRSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and DH. Tighten which options apply to KEY and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1657. [doc] ARM: document query log output.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY and RRSIG. [RT #11542]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1655. [bug] Logging multiple versions w/o a size was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11446]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1654. [bug] isc_result_totext() contained array bounds read
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1653. [func] Add key type checking to dst_key_fromfilename(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DST_TYPE_KEY should be used to read TSIG, TKEY and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SIG(0) keys.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1652. [bug] TKEY still uses KEY.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1651. [bug] dig: process multiple dash options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1650. [bug] dig, nslookup: flush standard out after each command.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1649. [bug] Silence "unexpected non-minimal diff" message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11206]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1648. [func] Update dnssec-lookaside named.conf syntax to support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multiple dnssec-lookaside namespaces (not yet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implemented).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1647. [bug] It was possible trigger a INSIST when chasing a DS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record that required walking back over a empty node.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1646. [bug] win32: logging file versions didn't work with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-UNC filenames. [RT#11486]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1645. [bug] named could trigger a REQUIRE failure if multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding masters with keys are specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1644. [bug] Update the journal modification time after a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding successful refresh query. [RT #11436]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1643. [bug] dns_db_closeversion() could leak memory / node
cfa64348224b66dd1c9979b809406c4d15b1c137fielding references. [RT #11163]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1642. [port] Support OpenSSL implementations which don't have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DSA support. [RT #11360]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1641. [bug] Update the check-names description in ARM. [RT #11389]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrectly closing the socket. [RT #11291]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1639. [func] Initial dlv system test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1638. [bug] "ixfr-from-differences" could generate a REQUIRE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure if the journal open failed. [RT #11347]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1637. [bug] Node reference leak on error in addnoqname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a error had occurred. The database version no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding matched the version of the database that was dumped.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1635. [bug] Memory leak on error in query_addds().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1634. [bug] named didn't supply a useful error message when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding detected duplicate views. [RT #11208]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1633. [bug] named should return NOTIMP to update requests to a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding slaves without a allow-update-forwarding acl specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11331]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1632. [bug] nsupdate failed to send prerequisite only UPDATE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages. [RT #11288]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1631. [bug] dns_journal_compact() could sometimes corrupt the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding journal. [RT #11124]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1630. [contrib] queryperf: add support for IPv6 transport.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1629. [func] dig now supports IPv6 scoped addresses with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding extended format in the local-server part. [RT #8753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1627. [bug] win32: sockets were not being closed when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding last external reference was removed. [RT# 11179]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1626. [bug] --enable-getifaddrs was broken. [RT#11259]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1625. [bug] named failed to load/transfer RFC2535 signed zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which contained CNAMES. [RT# 11237]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1624. [bug] zonemgr_putio() call should be locked. [RT# 11163]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1623. [bug] A serial number of zero was being displayed in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "sending notifies" log message when also-notify was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used. [RT #11177]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available, and suppress wildcard binding if not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1621. [bug] match-destinations did not work for IPv6 TCP queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT# 11156]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1620. [func] When loading a zone report if it is signed. [RT #11149]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT# 11118]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1618. [bug] Fencepost errors in dns_name_ishostname() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_ismailbox() could trigger a INSIST().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1617. [port] win32: VC++ 6.0 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1616. [compat] Ensure that named's version is visible in the core
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dump. [RT #11127]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it is defined.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1614. [port] win32: silence resource limit messages. [RT# 11101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1613. [bug] Builds would fail on machines w/o a if_nametoindex().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11119]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1612. [bug] check-names at the option/view level could trigger
f8daf64667c8f58631844cb460099333eabfe68bgregames an INSIST. [RT# 11116]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1611. [bug] solaris: IPv6 interface scanning failed to cope with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no active IPv6 interfaces.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1610. [bug] On dual stack machines "dig -b" failed to set the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address type to be looked up with "@server".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11069]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1609. [func] dig now has support to chase DNSSEC signature chains.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSSEC validation code in dig coded by Olivier Courtay
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (olivier.courtay@irisa.fr) for the IDsA project
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1608. [func] dig and host now accept -4/-6 to select IP transport
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to use when making queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1607. [bug] dig, host and nslookup were still using random()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to generate query ids. [RT# 11013]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1606. [bug] DLV insecurity proof was failing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1604. [bug] A xfrout_ctx_create() failure would result in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding xfrout_ctx_destroy() being called with a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding partially initialized structure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1603. [bug] nsupdate: set interactive based on isatty().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT# 10929]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1602. [bug] Logging to a file failed unless a size was specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT# 10925]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1601. [bug] Silence spurious warning 'both "recursion no;" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "allow-recursion" active' warning from view "_bind".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT# 10920]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1600. [bug] Duplicate zone pre-load checks were not case
cfa64348224b66dd1c9979b809406c4d15b1c137fielding insensitive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1599. [bug] Fix memory leak on error path when checking named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1598. [func] Specify that certain parts of the namespace must
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be secure (dnssec-must-be-secure).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1597. [func] Allow notify-source and query-source to be specified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on a per server basis similar to transfer-source.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1596. [func] Accept 'notify-source' style syntax for query-source.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1595. [func] New notify type 'master-only'. Enable notify for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding master zones only.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1594. [bug] 'rndc dumpdb' could prevent named from answering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries while the dump was in progress. [RT #10565]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1593. [bug] rndc should return "unknown command" to unknown
cfa64348224b66dd1c9979b809406c4d15b1c137fielding commands. [RT# 10642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1592. [bug] configure_view() could leak a dispatch. [RT# 10675]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1591. [bug] libbind: updated to BIND 8.4.5.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1590. [port] netbsd: update thread support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1589. [func] DNSSEC lookaside validation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1587. [bug] dns_message_settsigkey() failed to clear existing key.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1586. [func] "check-names" is now implemented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1585. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1584. [bug] "make test" failed with a read only source tree.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10461]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1583. [bug] Records add via UPDATE failed to get the correct trust
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level. [RT #10452]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1582. [bug] rrset-order failed to work on RRsets with more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than 32 elements. [RT #10381]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1581. [func] Disable DNSSEC support by default. To enable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSSEC specify "dnssec-enable yes;" in named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1580. [bug] Zone destruction on final detach takes a long time.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1579. [bug] Multiple task managers could not be created.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10346]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
cfa64348224b66dd1c9979b809406c4d15b1c137fielding workaround code. [RT #10331]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1576. [bug] Race condition in dns_dispatch_addresponse().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT# 10272]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1574. [bug] Don't attempt to open the controls socket(s) when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding running tests. [RT #9091]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1573. [port] linux: update to libtool 1.5.2 so that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "make install DESTDIR=/xx" works with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "configure --with-libtool". [RT #9941]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1572. [bug] nsupdate: sign the soa query to find the enclosing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone if the server is specified. [RT #10148]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1571. [bug] rbt:hash_node() could fail leaving the hash table
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in an inconsistent state. [RT #10208]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1570. [bug] nsupdate failed to handle classes other than IN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New keyword 'class' which sets the default class.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10202]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1569. [func] nsupdate new command 'answer' which displays the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding complete answer message to the last update.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1568. [bug] nsupdate now reports that the update failed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interactive mode. [RT# 10236]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1566. [port] Support for the cmsg framework on Solaris and HP/UX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This also solved the problem that match-destinations
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for IPv6 addresses did not work on these systems.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10221]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1565. [bug] CD flag should be copied to outgoing queries unless
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the query is under a secure entry point in which case
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CD should be set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1564. [func] Attempt to provide a fallback entropy source to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used if named is running chrooted and named is unable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to open entropy source within the chroot area.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1563. [bug] Gracefully fail when unable to obtain neither an IPv4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nor an IPv6 dispatch. [RT #10230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1562. [bug] isc_socket_create() and isc_socket_accept() could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding leak memory under error conditions. [RT #10230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1561. [bug] It was possible to release the same name twice if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named ran out of memory. [RT #10197]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and EAI_NONAME to the same value.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1559. [port] named should ignore SIGFSZ.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
cfa64348224b66dd1c9979b809406c4d15b1c137fielding child zones for which we don't have a supported
cfa64348224b66dd1c9979b809406c4d15b1c137fielding algorithm. Such child zones are treated as unsigned.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1557. [func] Implement missing DNSSEC tests for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * NOQNAME proof with wildcard answers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * NOWILDARD proof with NXDOMAIN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Cache and return NOQNAME with wildcard answers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1556. [bug] nsupdate now treats all names as fully qualified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1555. [func] 'rrset-order cyclic' no longer has a random starting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding point per query. [RT #7572]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1554. [bug] dig, host, nslookup failed when no nameservers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were specified in /etc/resolv.conf. [RT #8232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1553. [bug] The windows socket code could stop accepting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding connections. [RT#10115]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1552. [bug] Accept NOTIFY requests from mapped masters if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding matched-mapped is set. [RT #10049]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1551. [port] Open "/dev/null" before calling chroot().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1550. [port] Call tzset(), if available, before calling chroot().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1549. [func] named-checkzone can now write out the zone contents
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a easily parsable format (-D and -o).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1548. [bug] When parsing APL records it was possible to silently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding accept out of range ADDRESSFAMILY values. [RT# 9979]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1547. [bug] Named wasted memory recording duplicate lame zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding entries. [RT #9341]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1546. [bug] We were rejecting valid secure CNAME to negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1545. [bug] It was possible to leak memory if named was unable to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bind to the specified transfer source and TSIG was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being used. [RT #10120]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1544. [bug] Named would logged a single entry to a file despite it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being over the specified size limit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1543. [bug] Logging using "versions unlimited" did not work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1542. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1541. [func] NSEC now uses new bitmap format.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1539. [bug] Open UDP sockets for notify-source and transfer-source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that use reserved ports at startup. [RT #9475]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1538. [placeholder] rt9997
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1537. [func] New option "querylog". If set specify whether query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding logging is to be enabled or disabled at startup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1536. [bug] Windows socket code failed to log a error description
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when returning ISC_R_UNEXPECTED. [RT #9998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1535. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1534. [bug] Race condition when priming cache. [RT# 9940]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1533. [func] Warn if both "recursion no;" and "allow-recursion"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are active. [RT# 4389]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1532. [port] netbsd: the configure test for <sys/sysctl.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1531. [port] AIX more libtool fixes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1530. [bug] It was possible to trigger a INSIST() failure if a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding slave master file was removed at just the correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding moment. [RT #9462]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1529. [bug] "notify explicit;" failed to log that NOTIFY messages
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were being sent for the zone. [RT# 9442]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1528. [cleanup] Simplify some dns_name_ functions based on the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deprecation of bitstring labels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1527. [cleanup] Reduce the number of gettimeofday() calls without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding losing necessary timer granularity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1526. [func] Implemented "additional section caching (or acache)",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an internal cache framework for additional section
cfa64348224b66dd1c9979b809406c4d15b1c137fielding content to improve response performance. Several
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configuration options were provided to control the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1525. [bug] dns_cache_create() could trigger a REQUIRE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure in isc_mem_put() during error cleanup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1524. [port] AIX needs to be able to resolve all symbols when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding creating shared libraries (--with-libtool).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1523. [bug] Fix race condition in rbtdb. [RT# 9189]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1522. [bug] dns_db_findnode() relax the requirements on 'name'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1521. [bug] dns_view_createresolver() failed to check the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result from isc_mem_create(). [RT# 9294]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1520. [protocol] Add SSHFP (SSH Finger Print) type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
cfa64348224b66dd1c9979b809406c4d15b1c137fielding length of the new bitmap.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contained a off-by-one error when working out the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding number of octets in the bitmap.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1517. [port] Support for IPv6 interface scanning on HP/UX and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TrueUNIX 5.1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1515. [func] Allow transfer source to be set in a server statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1514. [bug] named: isc_hash_destroy() was being called too early.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1513. [doc] Add "US" to root-delegation-only exclude list.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1512. [bug] Extend the delegation-only logging to return query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding type, class and responding nameserver.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1511. [bug] delegation-only was generating false positives
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on negative answers from sub-zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1510. [func] New view option "root-delegation-only". Apply
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegation-only check to all TLDs and root.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note there are some TLDs that are NOT delegation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only (e.g. DE, LV, US and MUSEUM) these can be excluded
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the checks by using exclude.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding root-delegation-only exclude {
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "DE"; "LV"; "US"; "MUSEUM";
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1509. [bug] Hint zones should accept delegation-only. Forward
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone should not accept delegation-only.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1508. [bug] Don't apply delegation-only checks to answers from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding forwarders.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1507. [bug] Handle BIND 8 style returns to NS queries to parents
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when making delegation-only checks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1506. [bug] Wrong return type for dns_view_isdelegationonly().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1504. [func] New zone type "delegation-only".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1503. [port] win32: install libeay32.dll outside of system32.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1501. [func] Allow TCP queue length to be specified via
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named.conf, tcp-listen-queue.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1500. [bug] host failed to lookup MX records. Also look up
cfa64348224b66dd1c9979b809406c4d15b1c137fielding AAAA records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1499. [bug] isc_random need to be seeded better if arc4random()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1498. [port] bsdos: 5.x support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1497. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1496. [port] test for pthread_attr_setstacksize().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1495. [cleanup] Replace hash functions with universal hash.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1494. [security] Turn on RSA BLINDING as a precaution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1493. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1492. [cleanup] Preserve rwlock quota context when upgrading /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding downgrading. [RT #5599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lines. [RT #6206]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1490. [bug] Accept reading state as well as working state in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ns_client_next(). [RT #6813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1489. [compat] Treat 'allow-update' on slave zones as a warning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1488. [bug] Don't override trust levels for glue addresses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1487. [bug] A REQUIRE() failure could be triggered if a zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queued for transfer and the zone was then removed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1486. [bug] isc_print_snprintf() '%%' consumed one too many format
cfa64348224b66dd1c9979b809406c4d15b1c137fielding characters. [RT# 8230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1485. [bug] gen failed to handle high type values. [RT #6225]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1484. [bug] The number of records reported after a AXFR was wrong.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1483. [bug] dig axfr failed if the message id in the answer failed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to match that in the request. Only the id in the first
cfa64348224b66dd1c9979b809406c4d15b1c137fielding message is required to match. [RT #8138]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1482. [bug] named could fail to start if the kernel supports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv6 but no interfaces are configured. Similarly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for IPv4. [RT #6229]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1481. [bug] Refresh and stub queries failed to use masters keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if specified. [RT #7391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1480. [bug] Provide replay protection for rndc commands. Full
cfa64348224b66dd1c9979b809406c4d15b1c137fielding replay protection requires both rndc and named to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be updated. Partial replay protection (limited
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exposure after restart) is provided if just named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is updated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1479. [bug] cfg_create_tuple() failed to handle out of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory cleanup. parse_list() would leak memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on syntax errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1478. [port] ifconfig.sh didn't account for other virtual
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interfaces. It now takes a optional argument
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to specify the first interface number. [RT #3907]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1477. [bug] memory leak using stub zones and TSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1476. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1475. [port] Probe for old sprintf().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1474. [port] Provide strtoul() and memmove() for platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without them.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1473. [bug] create_map() and create_string() failed to handle out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory cleanup. [RT #6813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1471. [bug] libbind: updated to BIND 8.4.0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1470. [bug] Incorrect length passed to snprintf. [RT #5966]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1469. [func] Log end of outgoing zone transfer at same level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as the start of transfer is logged. [RT #4441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1468. [func] Internal zones are no longer counted for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'rndc status'. [RT #4706]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1467. [func] $GENERATES now supports optional class and ttl.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1466. [bug] lwresd configuration errors resulted in memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and lock leaks. [RT #5228]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to check that trailing bits were zero allowing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some invalid base64 strings to be accepted. [RT #5397]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1464. [bug] Preserve "out of zone" data for outgoing zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transfers. [RT #5192]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NXT bit maps. [RT #5577]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1462. [bug] parse_sizeval() failed to check the token type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1460. [bug] inet_pton() failed to reject certain malformed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv6 literals.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1459. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1458. [cleanup] sprintf() -> snprintf().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1457. [port] Provide strlcat() and strlcpy() for platforms without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1455. [bug] <netaddr> missing from server grammar in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1454. [port] Use getifaddrs() if available for interface scanning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --disable-getifaddrs to override. Glibc currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has a getifaddrs() that does not support IPv6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use --enable-getifaddrs=glibc to force the use of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this version under linux machines.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1452. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1451. [bug] rndc-confgen didn't exit with a error code for all
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failures. [RT #5209]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1450. [bug] Fetching expired glue failed under certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding circumstances. [RT #5124]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1449. [bug] query_addbestns() didn't handle running out of memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gracefully.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1448. [bug] Handle empty wildcards labels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1447. [bug] We were casting (unsigned int) to and from (void *).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataset->private4 is now rdataset->privateuint4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to reflect a type change.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1446. [func] Implemented undocumented alternate transfer sources
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from BIND 8. See use-alt-transfer-source,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding alt-transfer-source and alt-transfer-source-v6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SECURITY: use-alt-transfer-source is ENABLED unless
cfa64348224b66dd1c9979b809406c4d15b1c137fielding you are using views. This may cause a security risk
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in accidental disclosure of wrong zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding content if the master supplying different source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding content based on IP address. If you are not certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC recommends setting use-alt-transfer-source no;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been replaced with DNS_ADBFIND_STARTATZONE which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causes the search to start using the closest zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1444. [func] dns_view_findzonecut2() allows you to specify if the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache should be searched for zone cuts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1443. [func] Masters lists can now be specified and referenced
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in zone masters clauses and other masters lists.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1442. [func] New functions for manipulating port lists:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_portlist_create(), dns_portlist_add(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_portlist_remove(), dns_portlist_match(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_portlist_attach() and dns_portlist_detach().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1441. [func] It is now possible to tell dig to bind to a specific
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source port.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1440. [func] It is now possible to tell named to avoid using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding certain source ports (avoid-v4-udp-ports,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding avoid-v6-udp-ports).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1439. [bug] Named could return NOERROR with certain NOTIFY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failures. Return NOTAUTH if the NOTIFY zone is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not being served.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1438. [func] Log TSIG (if any) when logging NOTIFY requests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1437. [bug] Leave space for stdio to work in. [RT #5033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1436. [func] dns_zonemgr_resumexfrs() can be used to restart
cfa64348224b66dd1c9979b809406c4d15b1c137fielding stalled transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1435. [bug] zmgr_resume_xfrs() was being called read locked
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rather than write locked. zmgr_resume_xfrs()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was not being called if the zone was being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1434. [bug] "rndc reconfig" failed to initiate the initial
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone transfer of new slave zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1433. [bug] named could trigger a REQUIRE failure if it could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not get a file descriptor when attempting to write
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a master file. [RT #4347]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1432. [func] The advertised EDNS UDP buffer size can now be set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via named.conf (edns-udp-size).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1431. [bug] isc_print_snprintf() "%s" with precision could walk off
cfa64348224b66dd1c9979b809406c4d15b1c137fielding end of argument. [RT #5191]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1430. [port] linux: IPv6 interface scanning support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1429. [bug] Prevent the cache getting locked to old servers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1428. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1427. [bug] Race condition in adb with threaded build.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1426. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1425. [port] linux/libbind: define __USE_MISC when testing *_r()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function prototypes in netdb.h. [RT #4921]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1424. [bug] EDNS version not being correctly printed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1423. [contrib] queryperf: added A6 and SRV.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1422. [func] Log name/type/class when denying a query. [RT #4663]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1421. [func] Differentiate updates that don't succeed due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prerequisites (unsuccessful) vs other reasons
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1420. [port] solaris: work around gcc optimizer bug.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1419. [port] openbsd: use /dev/arandom. [RT #4950]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1418. [bug] 'rndc reconfig' did not cause new slaves to load.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1417. [func] ID.SERVER/CHAOS is now a built in zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding See "server-id" for how to configure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from SOA MINIMUM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1414. [func] Support for KSK flag.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1413. [func] Explicitly request the (re-)generation of DS records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from keysets (dnssec-signzone -g).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1412. [func] You can now specify servers to be tried if a nameserver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has IPv6 address and you only support IPv4 or the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reverse. See dual-stack-servers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1410. [func] Handle records that live in the parent zone, e.g. DS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1408. [bug] "make distclean" was not complete. [RT #4700]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1407. [bug] lfsr incorrectly implements the shift register.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1406. [bug] dispatch initializes one of the LFSR's with a incorrect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding polynomial. [RT #4617]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1405. [func] Use arc4random() if available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signkey now report their version in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding usage message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1402. [cleanup] A6 has been moved to experimental and is no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fully supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1401. [bug] adb wasn't clearing state when the timer expired.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1400. [bug] Block the addition of wildcard NS records by IXFR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or UPDATE. [RT #3502]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1399. [bug] Use serial number arithmetic when testing SIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timestamps. [RT #4268]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1398. [doc] ARM: notify-also should have been also-notify.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1396. [func] dnssec-signzone: adjust the default signing time by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 1 hour to allow for clock skew.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have a working implementation. [RT #4079]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1394. [func] It is now possible to check if a particular element is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a acl. Remove duplicate entries from the localnets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not available in the kernel to prevent accidently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listening on IPv4 interfaces.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1392. [bug] named-checkzone: update usage.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1391. [func] Add support for IPv6 scoped addresses in named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1390. [func] host now supports ixfr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1389. [bug] named could fail to rotate long log files. [RT #3666]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defining HAVE_IFLIST_SYSCTL. [RT #3770]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1387. [bug] named could crash due to an access to invalid memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding space (which caused an assertion failure) in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incremental cleaning. [RT #3588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1386. [bug] named-checkzone -z stopped on errors in a zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1385. [bug] Setting serial-query-rate to 10 would trigger a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding REQUIRE failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1384. [bug] host was incompatible with BIND 8 in its exit code and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the output with the -l option. [RT #3536]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1383. [func] Track the serial number in a IXFR response and log if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a mismatch occurs. This is a more specific error than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "not exact". [RT #3445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1382. [bug] make install failed with --enable-libbind. [RT #3656]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1381. [bug] named failed to correctly process answers that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contained DNAME records where the resulting CNAME
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulted in a negative answer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1380. [func] 'rndc recursing' dump recursing queries to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'recursing-file = "named.recursing";'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1379. [func] 'rndc status' now reports tcp and recursion quota
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1377. [func] dns_zone_load{new}() now reports if the zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loaded, queued for loading to up to date.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1376. [func] New function dns_zone_logc() to log to specified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1374. [func] dns_adb_dump() now logs the lame zones associated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with each server.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1373. [bug] Recovery from expired glue failed under certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding circumstances.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1372. [bug] named crashes with an assertion failure on exit when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sharing the same port for listening and querying, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding changing listening addresses several times. [RT# 3509]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1371. [bug] notify-source-v6, transfer-source-v6 and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query-source-v6 with explicit addresses and using the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding same ports as named was listening on could interfere
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with named's ability to answer queries sent to those
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1370. [bug] dig '+[no]recurse' was incorrectly documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1369. [bug] Adding an NS record as the lexicographically last
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record in a secure zone didn't work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1368. [func] remove support for bitstring labels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1367. [func] Use response times to select forwarders.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1365. [func] "localhost" and "localnets" acls now include IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses / prefixes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1364. [func] Log file name when unable to open memory statistics
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and dump database files. [RT# 3437]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1363. [func] Listen-on-v6 now supports specific addresses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1362. [bug] remove IFF_RUNNING test when scanning interfaces.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1361. [func] log the reason for rejecting a server when resolving
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1360. [bug] --enable-libbind would fail when not built in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source tree for certain OS's.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1359. [security] Support patches OpenSSL libraries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1358. [bug] It was possible to trigger a INSIST when debugging
cfa64348224b66dd1c9979b809406c4d15b1c137fielding large dynamic updates. [RT #3390]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1357. [bug] nsupdate was extremely wasteful of memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1356. [tuning] Reduce the number of events / quantum for zone tasks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1354. [doc] lwres man pages had illegal nroff.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1353. [contrib] sdb/ldap to version 0.9.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1352. [bug] dig, host, nslookup when falling back to TCP use the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding current search entry (if any). [RT #3374]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1351. [bug] lwres_getipnodebyname() returned the wrong name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1350. [bug] dns_name_fromtext() failed to handle too many labels
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gracefully.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1348. [port] win32: Rewrote code to use I/O Completion Ports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in socket.c and eliminating a host of socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding errors. Performance is enhanced.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1347. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1346. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1345. [port] Use a explicit -Wformat with gcc. Not all versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding include it in -Wall.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1344. [func] Log if the serial number on the master has gone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding If you have multiple machines specified in the masters
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clause you may want to set 'multi-master yes;' to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding suppress this warning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1343. [func] Log successful notifies received (info). Adjust log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level for failed notifies to notice.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1342. [func] Log remote address with TCP dispatch failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1341. [func] Allow a rate limiter to be stalled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1340. [bug] Delay and spread out the startup refresh load.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lookups. Bit string lookups are no longer attempted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1338. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1337. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1336. [func] Nibble lookups under IP6.ARPA are now supported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_byaddr_create(). dns_byaddr_createptrname() is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deprecated, use dns_byaddr_createptrname2() instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1335. [bug] When performing a nonexistence proof, the validator
cfa64348224b66dd1c9979b809406c4d15b1c137fielding should discard parent NXTs from higher in the DNS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1334. [bug] When signing/verifying rdatasets, duplicate rdatas
cfa64348224b66dd1c9979b809406c4d15b1c137fielding need to be suppressed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1333. [contrib] queryperf now reports a summary of returned
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rcodes (-c), rcodes are printed in mnemonic form (-v).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1332. [func] Report the current serial with periodic commits when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rolling forward the journal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1331. [func] Generate DNSSEC wildcard proofs.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1330. [bug] When processing events (non-threaded) only allow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the task one chance to use to use its quantum.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1329. [func] named-checkzone will now check if nameservers that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding appear to be IP addresses. Available modes "fail",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "warn" (default) and "ignore" the results of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1328. [bug] The validator could incorrectly verify an invalid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative proof.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1327. [bug] The validator would incorrectly mark data as insecure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when seeing a bogus signature before a correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1326. [bug] DNAME/CNAME signatures were not being cached when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation was not being performed. [RT #3284]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1325. [bug] If the tcpquota was exhausted it was possible to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to trigger a INSIST() failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1324. [port] darwin: ifconfig.sh now supports darwin.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1322. [bug] dnssec-signzone usage message was misleading.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding would incorrectly duplicate its output and sign it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1320. [doc] query-source-v6 was missing from options section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1319. [func] libbind: log attempts to exploit #1318.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1318. [bug] libbind: Remote buffer overrun.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding element name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1316. [bug] libbind: gethostans() could get out of sync parsing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the response if there was a very long CNAME chain.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1315. [bug] Options should apply to the internal _bind view.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1314. [port] Handle ECONNRESET from sendmsg() [unix].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1313. [func] Query log now says if the query was signed (S) or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if EDNS was used (E).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1312. [func] Log TSIG key used w/ outgoing zone transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1310. [bug] 'rndc stop' failed to cause zones to be flushed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sometimes. [RT #3157]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1309. [func] Log that a zone transfer was covered by a TSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1308. [func] DS (delegation signer) support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1307. [bug] nsupdate: allow white space base64 key data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1306. [bug] Badly encoded LOC record when the size, horizontal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding precision or vertical precision was 0.1m.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1305. [bug] Document that internal zones are included in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc status results.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1304. [func] New function: dns_zone_name().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1302. [func] Extended rndc dumpdb to support dumping of zones and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding view selection: 'dumpdb [-all|-zones|-cache] [view]'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1301. [func] New category 'update-security'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1300. [port] Compaq Trucluster support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1299. [bug] Set AI_ADDRCONFIG when looking up addresses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via getaddrinfo() (affects dig, host, nslookup, rndc
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and nsupdate).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could be left with a trailing "\" after configure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has been run.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1297. [port] linux: make handling EINVAL from socket() no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding conditional on #ifdef LINUX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1296. [bug] isc_log_closefilelogs() needed to lock the log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1295. [bug] isc_log_setdebuglevel() needed to lock the log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1294. [func] libbind: no longer attempts bit string labels for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for nibble style resolution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1292. [func] Enable IPv6 support when using ioctl style interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding scanning and OS supports SIOCGLIFADDR using struct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if_laddrreq.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1291. [func] Enable IPv6 support when using sysctl style interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1290. [func] "dig axfr" now reports the number of messages
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as well as the number of records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reflect written requirements.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a rdataset to a zone db in the rbtdb implementation of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addrdataset.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1286. [bug] dns_name_downcase() enforce requirement that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding target != NULL or name->buffer != NULL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1285. [func] lwres: probe the system to see what address families
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are currently in use.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1284. [bug] The RTT estimate on unused servers was not aged.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1283. [func] Use "dataready" accept filter if available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1282. [port] libbind: hpux 11.11 interface scanning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1281. [func] Log zone when unable to get private keys to update
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone. Log zone when NXT records are missing from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding secure zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1280. [bug] libbind: escape '(' and ')' when converting to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding presentation form.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1278. [func] dig: now supports +[no]cl +[no]ttlid.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1277. [func] You can now create your own customized printing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding styles: dns_master_stylecreate() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_master_styledestroy().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1276. [bug] libbind: const pointer conflicts in res_debug.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1274. [bug] Memory leak in lwres_gnbarequest_parse().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1273. [port] libbind: solaris: 64 bit binary compatibility.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1272. [contrib] Berkeley DB 4.0 sdb implementation from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1271. [bug] "recursion available: {denied,approved}" was too
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1270. [bug] Check that system inet_pton() and inet_ntop() support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1269. [port] Openserver: ifconfig.sh support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1268. [port] Openserver: the value FD_SETSIZE depends on whether
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <sys/param.h> is included or not. Be consistent.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1267. [func] isc_file_openunique() now creates file using mode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 0666 rather than 0600.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are not C++ compatible, use *_TYPE versions instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1264. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1263. [bug] Reference after free error if dns_dispatchmgr_create()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support for compressed TSIG owner names.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1260. [func] libbind: res_update can now update IPv6 servers,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding new function res_findzonecut2().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding w/o sa_len.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1258. [bug] libbind: res_nametotype() and res_nametoclass() were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1257. [bug] Failure to write pid-file should not be fatal on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reload. [RT #2861]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1255. [bug] When verifying that an NXT proves nonexistence, check
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the rcode of the message and only do the matching NXT
cfa64348224b66dd1c9979b809406c4d15b1c137fielding check. That is, for NXDOMAIN responses, check that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the name is in the range between the NXT owner and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding next name, and for NOERROR NODATA responses, check
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that the type is not present in the NXT bitmap.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1254. [func] preferred-glue option from BIND 8.3.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1253. [bug] The dnssec system test failed to remove the correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1252. [bug] Dig, host and nslookup were not checking the address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the answer was coming from against the address it was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sent to. [RT# 2692]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1251. [port] win32: a make file contained absolute version specific
cfa64348224b66dd1c9979b809406c4d15b1c137fielding references.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1250. [func] Nsupdate will report the address the update was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1249. [bug] Missing masters clause was not handled gracefully.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1248. [bug] DESTDIR was not being propagated between makes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1247. [bug] Don't reset the interface index for link/site local
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses. [RT #2576]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1246. [func] New functions isc_sockaddr_issitelocal(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and isc_netaddr_islinklocal().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1244. [bug] Receiving a TCP message from a blackhole address would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prevent further messages being received over that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1243. [bug] It was possible to trigger a REQUIRE() in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_message_findtype(). [RT #2659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1241. [bug] Drop received UDP messages with a zero source port
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as these are invariably forged. [RT #2621]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1240. [bug] It was possible to leak zone references by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specifying an incorrect zone to rndc.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1239. [bug] Under certain circumstances named could continue to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding use a name after it had been freed triggering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding INSIST() failures. [RT #2614]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1238. [bug] It is possible to lockup the server when shutting down
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if notifies were being processed. [RT #2591]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1237. [bug] nslookup: "set q=type" failed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NULL terminated text regions. [RT #2588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1235. [func] Report 'out of memory' errors from openssl.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1234. [bug] contrib/sdb: 'zonetodb' failed to call
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_result_register(). DNS_R_SEENINCLUDE should not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1233. [bug] The flags field of a KEY record can be expressed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hex as well as decimal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1229. [bug] named would crash if it received a TSIG signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query as part of an AXFR response. [RT #2570]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if a number was expected and some other token was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found. [RT#2532]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1226. [func] Use EDNS for zone refresh queries. [RT #2551]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1225. [func] dns_message_setopt() no longer requires that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_message_renderbegin() to have been called.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1224. [bug] 'rrset-order' and 'sortlist' should be additive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not exclusive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1222. [bug] Specifying 'port *' did not always result in a system
cfa64348224b66dd1c9979b809406c4d15b1c137fielding selected (non-reserved) port being used. [RT #2537]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compared case insensitively. [RT #2542]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1220. [func] Support for APL rdata type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1219. [func] Named now reports the TSIG extended error code when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signature verification fails. [RT #1651]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1218. [bug] Named incorrectly returned SERVFAIL rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1217. [func] Report locations of previous key definition when a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding duplicate is detected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1216. [bug] Multiple server clauses for the same server were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reported. [RT #2514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1214. [bug] Win32: isc_file_renameunique() could leave zero length
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files behind.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1213. [func] Report view associated with client if it is not a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding standard view (_default or _bind).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1212. [port] libbind: 64k answer buffers were causing stack space
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be exceeded for certain OS. Use heap space instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1211. [bug] dns_name_fromtext() incorrectly handled certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding valid octal bitlabels. [RT #2483]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatible addresses. [RT #2461]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1209. [bug] Dig, host, nslookup were not checking the message ids
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on the responses. [RT #2454]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1208. [bug] dns_master_load*() failed to log a error message if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an error was detected when parsing the ownername of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a record. [RT #2448]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an invalid pointer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger a non-EDNS retry.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the message. [RT #2449]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1204. [bug] libbind: res_nupdate() failed to update the name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server addresses before sending the update.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1203. [func] Report locations of previous acl and zone definitions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a duplicate is detected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1202. [func] New functions: cfg_obj_line() and cfg_obj_file().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1201. [bug] Require that if 'callbacks' is passed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdata_fromtext(), callbacks->error and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding callbacks->warn are initialized.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1200. [bug] Log 'errno' that we are unable to convert to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_result_t. [RT #2404]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1199. [doc] ARM reference to RFC 2157 should have been RFC 1918.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1198. [bug] OPT printing style was not consistent with the way the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding header fields are printed. The DO bit was not reported
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if set. Report if any of the MBZ bits are set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1197. [bug] Attempts to define the same acl multiple times were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1196. [contrib] update mdnkit to 2.2.3.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1195. [bug] Attempts to redefine builtin acls should be caught.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1194. [bug] Not all duplicate zone definitions were being detected
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at the named.conf checking stage. [RT #2431]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1193. [bug] dig +besteffort parsing didn't handle packet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding truncation. dns_message_parse() has new flag
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS_MESSAGE_IGNORETRUNCATION.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1192. [bug] The seconds fields in LOC records were restricted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to three decimal places. More decimal places should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be allowed but warned about.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1191. [bug] A dynamic update removing the last non-apex name in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a secure zone would fail. [RT #2399]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1189. [bug] On some systems, malloc(0) returns NULL, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause the caller to report an out of memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. [RT #2398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1188. [bug] Dynamic updates of a signed zone would fail if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some of the zone private keys were unavailable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1187. [bug] named was incorrectly returning DNSSEC records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in negative responses when the DO bit was not set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding EOL token when reading to end of line.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unless RES_INIT is set when calling res_*init().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when res_*init() is called.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1183. [bug] Handle ENOSR error when writing to the internal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding control pipe. [RT #2395]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1182. [bug] The server could throw an assertion failure when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding constructing a negative response packet.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1181. [func] Add the "key-directory" configuration statement,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which allows the server to look for online signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keys in alternate directories.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1180. [func] dnssec-keygen should always generate keys with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding protocol 3 (DNSSEC), since it's less confusing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1179. [func] Add SIG(0) support to nsupdate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1178. [bug] Follow and cache (if appropriate) A6 and other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data chains to completion in the additional section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1177. [func] Report view when loading zones if it is not a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding standard view (_default or _bind). [RT #2270]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1176. [doc] Document that allow-v6-synthesis is only performed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for clients that are supplied recursive service.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1175. [bug] named-checkzone and named-checkconf failed to call
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_result_register() at startup which could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result in runtime exceptions when printing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "out of memory" errors. [RT #2335]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1174. [bug] Win32: add WSAECONNRESET to the expected errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from connect(). [RT #2308]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1173. [bug] Potential memory leaks in isc_log_create() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_log_settag(). [RT #2336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding table of RR types in ARM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1171. [func] Added function isc_region_compare(), updated files in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lib/dns to use this function instead of local one.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1170. [bug] Don't attempt to print the token when a I/O error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding occurs when parsing named.conf. [RT #2275]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1169. [func] Identify recursive queries in the query log.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1167. [contrib] nslint-2.1a3 (from author).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1166. [bug] "Not Implemented" should be reported as NOTIMP,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not NOTIMPL. [RT #2281]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1164. [bug] Empty masters clauses in slave / stub zones were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding handled gracefully. [RT #2262]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1163. [func] isc_time_formattimestamp() now includes the year.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1162. [bug] The allow-notify option was not accepted in slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone statements.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1161. [bug] named-checkzone looped on unbalanced brackets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1160. [bug] Generating Diffie-Hellman keys longer than 1024
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bits could fail. [RT #2241]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1159. [bug] MD and MF are not permitted to be loaded by RFC1123.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1158. [func] Report the client's address when logging notify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1157. [func] match-clients and match-destinations now accept
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keys. [RT #2045]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1156. [port] The configure test for strsep() incorrectly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding succeeded on certain patched versions of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding AIX 4.3.3. [RT #2190]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1155. [func] Recover from master files being removed from under
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1154. [bug] Don't attempt to obtain the netmask of a interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if there is no address configured. [RT #2176]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1153. [func] 'rndc {stop|halt} -p' now reports the process id
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the instance of named being shutdown.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1152. [bug] libbind: read buffer overflows.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1151. [bug] nslookup failed to check that the arguments to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the port, timeout, and retry options were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding valid integers and in range. [RT #2099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1150. [bug] named incorrectly accepted TTL values
cfa64348224b66dd1c9979b809406c4d15b1c137fielding containing plus or minus signs, such as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1149. [func] New function isc_parse_uint32().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1148. [func] 'rndc-confgen -a' now provides positive feedback.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1147. [func] Set IPV6_V6ONLY on IPv6 sockets if supported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the OS. listen-on-v6 { any; }; should no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result in IPv4 queries be accepted. Similarly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding control { inet :: ... }; should no longer result
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in IPv4 connections being accepted. This can be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding overridden at compile time by defining
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_ALLOW_MAPPED=1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported by the OS by a new function
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_socket_ipv6only().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1145. [func] "host" no longer reports a NOERROR/NODATA response
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by printing nothing. [RT #2065]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1144. [bug] rndc-confgen would crash if both the -a and -t
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options were specified. [RT #2159]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1143. [bug] When a trusted-keys statement was present and named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was built without crypto support, it would leak memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1142. [bug] dnssec-signzone would fail to delete temporary files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in some failure cases. [RT #2144]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1141. [bug] When named rejected a control message, it would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding leak a file descriptor and memory. It would also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail to respond, causing rndc to hang.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #2139, #2164]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the -s option. [RT #2138]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1139. [func] It is now possible to flush a given name from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache(s) via 'rndc flushname name [view]'. [RT #2051]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1138. [func] It is now possible to flush a given name from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache by calling the new function
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_cache_flushname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1137. [func] It is now possible to flush a given name from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ADB by calling the new function dns_adb_flushname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1136. [bug] CNAME records synthesized from DNAMEs did not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have a TTL of zero as required by RFC2672.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1135. [func] You can now override the default syslog() facility for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named/lwresd at compile time. [RT #1982]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1134. [bug] Multi-threaded servers could deadlock in ferror()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when reloading zone files. [RT #1951, #1998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1133. [bug] IN6_IS_ADDR_LOOPBACK was not portably defined on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding platforms without IN6_IS_ADDR_LOOPBACK. [RT #2106]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1132. [func] Improve UPDATE prerequisite failure diagnostic messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1131. [bug] The match-destinations view option did not work with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv6 destinations. [RT #2073, #2074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1130. [bug] Log messages reporting an out-of-range serial number
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not include the out-of-range number but the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding following token. [RT #2076]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1129. [bug] Multi-threaded servers could crash under heavy
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolution load due to a race condition. [RT #2018]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1128. [func] sdb drivers can now provide RR data in either text
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or wire format, the latter using the new functions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_sdb_putrdata() and dns_sdb_putnamedrdata().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1127. [func] rndc: If the server to contact has multiple addresses,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding try all of them.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1126. [bug] The server could access a freed event if shut
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down while a client start event was pending
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delivery. [RT #2061]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1125. [bug] rndc: -k option was missing from usage message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are now documented. [RT #2052]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1123. [bug] dig +[no]fail did not match description. [RT #2052]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1122. [tuning] Resolution timeout reduced from 90 to 30 seconds.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1121. [bug] The server could attempt to access a NULL zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding table if shut down while resolving.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1587, #2054]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1120. [bug] Errors in options were not fatal. [RT #2002]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1119. [func] Added support in Win32 for NTFS file/directory ACL's
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for access control.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1118. [bug] On multi-threaded servers, a race condition
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause an assertion failure in resolver.c
cfa64348224b66dd1c9979b809406c4d15b1c137fielding during resolver shutdown. [RT #2029]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1117. [port] The configure check for in6addr_loopback incorrectly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding succeeded on AIX 4.3 when compiling with -O2
cfa64348224b66dd1c9979b809406c4d15b1c137fielding because the test code was optimized away.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1116. [bug] Setting transfers in a server clause, transfers-in,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or transfers-per-ns to a value greater than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 2147483647 disabled transfers. [RT #2002]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1115. [func] Set maximum values for cleaning-interval,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding heartbeat-interval, interface-interval,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-transfer-idle-in, max-transfer-idle-out,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-transfer-time-in, max-transfer-time-out,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics-interval of 28 days and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sig-validity-interval of 3660 days. [RT #2002]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1114. [port] Ignore more accept() errors. [RT #2021]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1113. [bug] The allow-update-forwarding option was ignored
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when specified in a view. [RT #2014]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1112. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1111. [bug] Multi-threaded servers could deadlock processing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recursive queries due to a locking hierarchy
cfa64348224b66dd1c9979b809406c4d15b1c137fielding violation in adb.c. [RT #2017]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1110. [bug] dig should only accept valid abbreviations of +options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1109. [bug] nsupdate accepted illegal ttl values.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1108. [bug] On Win32, rndc was hanging when named was not running
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to failure to select for exceptional conditions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in select(). [RT #1870]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1107. [bug] nsupdate could catch an assertion failure if an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding invalid domain name was given as the argument to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the "zone" command.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1106. [bug] After seeing an out of range TTL, nsupdate would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding treat all TTLs as out of range. [RT #2001]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1105. [port] OpenUNIX 8 enable threads by default. [RT #1970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1104. [bug] Invalid arguments to the transfer-format option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause an assertion failure. [RT #1995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1102. [doc] Note that query logging is enabled by directing the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries category to a channel.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1101. [bug] Array bounds read error in lwres_gai_strerror.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1100. [bug] libbind: DNSSEC key ids were computed incorrectly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compile time errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1097. [func] libbind: RES_PRF_TRUNC for dig.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1096. [func] libbind: "DNSSEC OK" (DO) support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1095. [func] libbind: resolver option: no-tld-query. disables
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trying unqualified as a tld. no_tld_query is also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported for FreeBSD compatibility.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1094. [func] libbind: add support gcc's format string checking.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1093. [doc] libbind: miscellaneous nroff fixes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1092. [bug] libbind: get*by*() failed to check if res_init() had
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been called.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1091. [bug] libbind: misplaced va_end().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the amount of memory consumed resulting in garbage
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address being returned. Alignment calculations were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wasting space. We weren't suppressing duplicate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1089. [func] libbind: inet_{cidr,net}_{pton,ntop}() now have IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1088. [port] libbind: MPE/iX C.70 (incomplete)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1087. [bug] libbind: struct __res_state too large on 64 bit arch.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1086. [port] libbind: sunos: old sprintf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1085. [port] libbind: solaris: sys_nerr and sys_errlist do not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exist when compiling in 64 bit mode.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1084. [cleanup] libbind: gai_strerror() rewritten.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1083. [bug] The default control channel listened on the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wildcard address, not the loopback as documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1082. [bug] The -g option to named incorrectly caused logging
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be sent to syslog in addition to stderr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1081. [bug] Multicast queries were incorrectly identified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding based on the source address, not the destination
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1080. [bug] BIND 8 compatibility: accept bare IP prefixes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as the second element of a two-element top level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sort list statement. [RT #1964]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1079. [bug] BIND 8 compatibility: accept bare elements at top
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level of sort list treating them as if they were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a single element list. [RT #1963]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1078. [bug] We failed to correct bad tv_usec values in one case.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1077. [func] Do not accept further recursive clients when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the total number of recursive lookups being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding processed exceeds max-recursive-clients, even
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if some of the lookups are internally generated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1915, #1938]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1076. [bug] A badly defined global key could trigger an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on load/reload if views were used. [RT #1947]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1075. [bug] Out-of-range network prefix lengths were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reported. [RT #1954]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1074. [bug] Running out of memory in dump_rdataset() could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause an assertion failure. [RT #1946]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1073. [bug] The ADB cache cleaning should also be space driven.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1915, #1938]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1072. [bug] The TCP client quota could be exceeded when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recursion occurred. [RT #1937]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1071. [bug] Sockets listening for TCP DNS connections
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified an excessive listen backlog. [RT #1937]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1070. [bug] Copy DNSSEC OK (DO) to response as specified by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1069. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1068. [bug] errno could be overwritten by catgets(). [RT #1921]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1067. [func] Allow quotas to be soft, isc_quota_soft().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1066. [bug] Provide a thread safe wrapper for strerror().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1065. [func] Runtime support to select new / old style interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding scanning using ioctls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1064. [bug] Do not shut down active network interfaces if we
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are unable to scan the interface list. [RT #1921]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1063. [bug] libbind: "make install" was failing on IRIX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1062. [bug] If the control channel listener socket was shut
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down before server exit, the listener object could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be freed twice. [RT #1916]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1061. [bug] If periodic cache cleaning happened to start
cfa64348224b66dd1c9979b809406c4d15b1c137fielding while cleaning due to reaching the configured
cfa64348224b66dd1c9979b809406c4d15b1c137fielding maximum cache size was in progress, the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could catch an assertion failure. [RT #1912]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1060. [func] Move refresh, stub and notify UDP retry processing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding into dns_request.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1059. [func] dns_request now support will now retry UDP queries,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_request_createvia2() and dns_request_createraw2().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1058. [func] Limited lifetime ticker timers are now available,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_timertype_limited.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1057. [bug] Reloading the server after adding a "file" clause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to a zone statement could cause the server to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding crash due to a typo in change 1016.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1056. [bug] Rndc could catch an assertion failure on SIGINT due
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to an uninitialized variable. [RT #1908]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1055. [func] Version and hostname queries can now be disabled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using "version none;" and "hostname none;",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding respectively.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1054. [bug] On Win32, cfg_categories and cfg_modules need to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exported from the libisccfg DLL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1053. [bug] Dig did not increase its timeout when receiving
cfa64348224b66dd1c9979b809406c4d15b1c137fielding AXFRs unless the +time option was used. [RT #1904]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1052. [bug] Journals were not being created in binary mode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in "journal format not recognized" error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding under Win32. [RT #1889]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1051. [bug] Do not ignore a network interface completely just
cfa64348224b66dd1c9979b809406c4d15b1c137fielding because it has a noncontiguous netmask. Instead,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding omit it from the localnets ACL and issue a warning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1050. [bug] Log messages reporting malformed IP addresses in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address lists such as that of the forwarders option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to include the correct error code, file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name, and line number. [RT #1890]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1049. [func] "pid-file none;" will disable writing a pid file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1048. [bug] Servers built with -DISC_MEM_USE_INTERNAL_MALLOC=1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding didn't work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1047. [bug] named was incorrectly refusing all requests signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with a TSIG key derived from an unsigned TKEY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negotiation with a NOERROR response. [RT #1886]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1046. [bug] The help message for the --with-openssl configure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option was inaccurate. [RT #1880]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1045. [bug] It was possible to skip saving glue for a nameserver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for a stub zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1044. [bug] Specifying allow-transfer, notify-source, or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding notify-source-v6 in a stub zone was not treated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as an error.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1043. [bug] Specifying a transfer-source or transfer-source-v6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option in the zone statement for a master zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not treated as an error. [RT #1876]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1042. [bug] The "config" logging category did not work properly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1041. [bug] Dig/host/nslookup could catch an assertion failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on SIGINT due to an uninitialized variable. [RT #1867]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1040. [bug] Multiple listen-on-v6 options with different ports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were not accepted. [RT #1875]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1039. [bug] Negative responses with CNAMEs in the answer section
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were cached incorrectly. [RT #1862]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1038. [bug] In servers configured with a tkey-domain option,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TKEY queries with an owner name other than the root
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause an assertion failure. [RT #1866, #1869]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1037. [bug] Negative responses whose authority section contain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SOA or NS records whose owner names are not equal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding equal to or parents of the query name should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rejected. [RT #1862]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1036. [func] Silently drop requests received via multicast as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding long as there is no final multicast DNS standard.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1035. [bug] If we respond to multicast queries (which we
cfa64348224b66dd1c9979b809406c4d15b1c137fielding currently do not), respond from a unicast address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as specified in RFC 1123. [RT #137]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1034. [bug] Ignore the RD bit on multicast queries as specified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in RFC 1123. [RT #137]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1033. [bug] Always respond to requests with an unsupported opcode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with NOTIMP, even if we don't have a matching view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or cannot determine the class.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1032. [func] hostname.bind/txt/chaos now returns the name of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the machine hosting the nameserver. This is useful
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in diagnosing problems with anycast servers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1030. [bug] On systems with no resolv.conf file, nsupdate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exited with an error rather than defaulting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to using the loopback address. [RT #1836]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1029. [bug] Some named.conf errors did not cause the loading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the configuration file to return a failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding status even though they were logged. [RT #1847]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1028. [bug] On Win32, dig/host/nslookup looked for resolv.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the wrong directory. [RT #1833]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1027. [bug] RRs having the reserved type 0 should be rejected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1026. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1025. [bug] Don't use multicast addresses to resolve iterative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries. [RT #101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1024. [port] Compilation failed on HP-UX 11.11 due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incompatible use of the SIOCGLIFCONF macro
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name. [RT #1831]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1023. [func] Accept hints without TTLs.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1022. [bug] Don't report empty root hints as "extra data".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1021. [bug] On Win32, log message timestamps were one month
cfa64348224b66dd1c9979b809406c4d15b1c137fielding later than they should have been, and the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding would exhibit unspecified behavior in December.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1020. [bug] IXFR log messages did not distinguish between
cfa64348224b66dd1c9979b809406c4d15b1c137fielding true IXFRs, AXFR-style IXFRs, and mere version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding polls. [RT #1811]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1019. [bug] The value of the lame-ttl option was limited to 18000
cfa64348224b66dd1c9979b809406c4d15b1c137fielding seconds, not 1800 seconds as documented. [RT #1803]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1018. [bug] The default log channel was not always initialized
cfa64348224b66dd1c9979b809406c4d15b1c137fielding correctly. [RT #1813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1017. [bug] When specifying TSIG keys to dig and nsupdate using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the -k option, they must be HMAC-MD5 keys. [RT #1810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1016. [bug] Slave zones with no backup file were re-transferred
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on every server reload.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1015. [bug] Log channels that had a "versions" option but no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "size" option failed to create numbered log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files. [RT #1783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1014. [bug] Some queries would cause statistics counters to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding increment more than once or not at all. [RT #1321]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1013. [bug] It was possible to cancel a query twice when marking
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a server as bogus or by having a blackhole acl.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1012. [bug] The -p option to named did not behave as documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1011. [cleanup] Removed isc_dir_current().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1010. [bug] The server could attempt to execute a command channel
cfa64348224b66dd1c9979b809406c4d15b1c137fielding command after initiating server shutdown, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure. [RT #1766]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1009. [port] OpenUNIX 8 support. [RT #1728]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1008. [port] libtool.m4, ltmain.sh from libtool-1.4.2.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1007. [port] config.guess, config.sub from autoconf-2.52.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1006. [bug] If a KEY RR was found missing during DNSSEC validation,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure could subsequently be triggered
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the resolver. [RT #1763]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1005. [bug] Don't copy nonzero RCODEs from request to response.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1004. [port] Deal with recvfrom() returning EHOSTDOWN. [RT #1770]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1003. [func] Add the +retry option to dig.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1002. [bug] When reporting an unknown class name in named.conf,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding including the file name and line number. [RT #1759]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1001. [bug] win32 socket code doio_recv was not catching a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding WSACONNRESET error when a client was timing out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the request and closing its socket. [RT #1745]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1000. [bug] BIND 8 compatibility: accept "HESIOD" as an alias
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for class "HS". [RT #1759]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 999. [func] "rndc retransfer zone [class [view]]" added.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 998. [func] named-checkzone now has arguments to specify the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding chroot directory (-t) and working directory (-w).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 997. [func] Add support for RSA-SHA1 keys (RFC3110).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 996. [func] Issue warning if the configuration filename contains
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the chroot path.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 995. [bug] dig, host, nslookup: using a raw IPv6 address as a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding target address should be fatal on a IPv4 only system.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 994. [func] Treat non-authoritative responses to queries for type
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NS as referrals even if the NS records are in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding answer section, because BIND 8 servers incorrectly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding send them that way. This is necessary for DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation of the NS records of a secure zone to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding succeed when the parent is a BIND 8 server. [RT #1706]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 993. [func] dig: -v now reports the version.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 992. [doc] dig: ~/.digrc is now documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 991. [func] Lower UDP refresh timeout messages to level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 990. [bug] The rndc-confgen man page was not installed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 989. [bug] Report filename if $INCLUDE fails for file related
cfa64348224b66dd1c9979b809406c4d15b1c137fielding errors. [RT #1736]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 988. [bug] 'additional-from-auth no;' did not work reliably
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the case of queries answered from the cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 987. [bug] "dig -help" didn't show "+[no]stats".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 986. [bug] "dig +noall" failed to clear stats and command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 985. [func] Consider network interfaces to be up iff they have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a nonzero IP address rather than based on the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IFF_UP flag. [RT #1160]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 984. [bug] Multi-threading should be enabled by default on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Solaris 2.7 and newer, but it wasn't.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 983. [func] The server now supports generating IXFR difference
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sequences for non-dynamic zones by comparing zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding versions, when enabled using the new config
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option "ixfr-from-differences". [RT #1727]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 982. [func] If "memstatistics-file" is set in options the memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics will be written to it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 981. [func] The dnssec tools can now take multiple '-r randomfile'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 980. [bug] Incoming zone transfers restarting after an error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could trigger an assertion failure. [RT #1692]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 979. [func] Incremental master file dumping. dns_master_dumpinc(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_master_dumptostreaminc(), dns_dumpctx_attach(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_dumpctx_detach(), dns_dumpctx_cancel(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_dumpctx_db() and dns_dumpctx_version().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 978. [bug] dns_db_attachversion() had an invalid REQUIRE()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 977. [bug] Improve "not at top of zone" error message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 976. [func] named-checkconf can now test load master zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (named-checkconf -z). [RT #1468]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 975. [bug] "max-cache-size default;" as a view option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding caused an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 974. [bug] "max-cache-size unlimited;" as a global option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was not accepted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 973. [bug] Failed to log the question name when logging:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "bad zone transfer request: non-authoritative zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (NOTAUTH)".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 972. [bug] The file modification time code in zone.c was using the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wrong epoch. [RT #1667]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 971. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 970. [func] 'max-journal-size' can now be used to set a target
cfa64348224b66dd1c9979b809406c4d15b1c137fielding size for a journal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 969. [func] dig now supports the undocumented dig 8 feature
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of allowing arbitrary labels, not just dotted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding decimal quads, with the -x option. This can be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used to conveniently look up RFC2317 names as in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "dig -x 10.0.0.0-127". [RT #827, #1576, #1598]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 968. [bug] On win32, the isc_time_now() function was unnecessarily
cfa64348224b66dd1c9979b809406c4d15b1c137fielding calling strtime(). [RT #1671]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 967. [bug] On win32, the link for bindevt was not including the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding required resource file to enable the event viewer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to interpret the error messages in the event log,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 966. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 965. [bug] Including data other than root server NS and A
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records in the root hint file could cause a rbtdb
cfa64348224b66dd1c9979b809406c4d15b1c137fielding node reference leak. [RT #1581, #1618]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 964. [func] Warn if data other than root server NS and A records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are found in the root hint file. [RT #1581, #1618]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 963. [bug] Bad ISC_LANG_ENDDECLS. [RT #1645]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 962. [bug] libbind: bad "#undef", don't attempt to install
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-existent nlist.h. [RT #1640]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 961. [bug] Tried to use a IPV6 feature when ISC_PLATFORM_HAVEIPV6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was not defined. [RT #1482]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 960. [port] liblwres failed to build on systems with support for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding getrrsetbyname() in the OS. [RT #1592]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 959. [port] On FreeBSD, determine the number of CPUs by calling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sysctlbyname(). [RT #1584]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 958. [port] ssize_t is not available on all platforms. [RT #1607]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 957. [bug] sys/select.h inclusion was broken on older platforms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 956. [bug] ns_g_autorndcfile changed to ns_g_keyfile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in named/win32/os.c due to code changes in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding change #953. win32 .make file for rndc-confgen
cfa64348224b66dd1c9979b809406c4d15b1c137fielding updated to add include path for os.h header.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0rc1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 955. [bug] When using views, the zone's class was not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inherited from the view's class. [RT #1583]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 954. [bug] When requesting AXFRs or IXFRs using dig, host, or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nslookup, the RD bit should not be set as zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transfers are inherently non-recursive. [RT #1575]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 953. [func] The /var/run/named.key file from change #843
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has been replaced by /etc/rndc.key. Both
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named and rndc will look for this file and use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it to configure a default control channel key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if not already configured using a different
cfa64348224b66dd1c9979b809406c4d15b1c137fielding method (rndc.conf / controls). Unlike
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it must be created by manually running
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc-confgen -a".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 952. [bug] The server required manual intervention to serve the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding affected zones if it died between creating a journal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and committing the first change to it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 951. [bug] CFLAGS was not passed to the linker when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding linking some of the test programs under
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 950. [bug] Explicit TTLs did not properly override $TTL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to a bug in change 834. [RT #1558]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 949. [bug] host was unable to print records larger than 512
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bytes. [RT #1557]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0b2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 948. [port] Integrated support for building on Windows NT /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Windows 2000.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 947. [bug] dns_rdata_soa_t had a badly named element "mname" which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was really the RNAME field from RFC1035. To avoid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding confusion and silent errors that would occur it the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "origin" and "mname" elements were given their correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding names "mname" and "rname" respectively, the "mname"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding element is renamed to "contact".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 946. [cleanup] doc/misc/options is now machine-generated from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configuration parser syntax tables, and therefore
cfa64348224b66dd1c9979b809406c4d15b1c137fielding more likely to be correct.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 945. [func] Add the new view-specific options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "match-destinations" and "match-recursive-only".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 944. [func] Check for expired signatures on load.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 943. [bug] The server could crash when receiving a command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via rndc if the configuration file listed only
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nonexistent keys in the controls statement. [RT #1530]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 942. [port] libbind: GETNETBYADDR_ADDR_T was not correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defined on some platforms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 941. [bug] The configuration checker crashed if a slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone didn't contain a masters statement. [RT #1514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 940. [bug] Double zone locking failure on error path. [RT #1510]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 939. [port] Add the --disable-linux-caps option to configure for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding systems that manage capabilities outside of named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 938. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 937. [bug] A race when shutting down a zone could trigger a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding INSIST() failure. [RT #1034]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 936. [func] Warn about IPv4 addresses that are not complete
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dotted quads. [RT #1084]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 935. [bug] inet_pton failed to reject leading zeros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 934. [port] Deal with systems where accept() spuriously returns
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ECONNRESET.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 933. [bug] configure failed doing libbind on platforms not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported by BIND 8. [RT #1496]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0a3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when installing isc-config.sh.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #198, #1466]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 931. [bug] The controls statement only attempted to verify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages using the first key in the key list.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (9.2.0a1/a2 only).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 930. [func] Query performance testing tool added as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 929. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 928. [bug] nsupdate would send empty update packets if the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding send (or empty line) command was run after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding another send but before any new updates or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prerequisites were specified. It should simply
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ignore this command.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 927. [bug] Don't hold the zone lock for the entire dump to disk.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 926. [bug] The resolver could deadlock with the ADB when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding shutting down (multi-threaded builds only).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 925. [cleanup] Remove openssl from the distribution; require that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --with-openssl be specified if DNSSEC is needed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 924. [port] Extend support for pre-RFC2133 IPv6 implementation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 923. [bug] Multiline TSIG secrets (and other multiline strings)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were not accepted in named.conf. [RT #1469]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 922. [func] Added two new lwres_getrrsetbyname() result codes,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ERR_NONAME and ERR_NODATA.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 921. [bug] lwres returned an incorrect error code if it received
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a truncated message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 920. [func] Increase the lwres receive buffer size to 16K.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 919. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 918. [func] In nsupdate, TSIG errors are no longer treated as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fatal errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 917. [func] New nsupdate command 'key', allowing TSIG keys to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be specified in the nsupdate command stream rather
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than the command line.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 916. [bug] Specifying type ixfr to dig without specifying
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a serial number failed in unexpected ways.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 915. [func] The named-checkconf and named-checkzone programs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now have a '-v' option for printing their version.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 914. [bug] Global 'server' statements were rejected when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using views, even though they were accepted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in 9.1. [RT #1368]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 913. [bug] Cache cleaning was not sufficiently aggressive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1441, #1444]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 912. [bug] Attempts to set the 'additional-from-cache' or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'additional-from-auth' option to 'no' in a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server with recursion enabled will now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be ignored and cause a warning message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 911. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 910. [port] Some pre-RFC2133 IPv6 implementations do not define
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_ANY_INIT. [RT #1416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 909. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 908. [func] New program, rndc-confgen, to simplify setting up rndc.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 907. [func] The ability to get entropy from either the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding random device, a user-provided file or from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the keyboard was migrated from the DNSSEC tools
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to libisc as isc_entropy_usebestsource().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 906. [port] Separated the system independent portion of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 905. [bug] Configuring a forward "zone" for the root domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not work. [RT #1418]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 904. [bug] The server would leak memory if attempting to use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an expired TSIG key. [RT #1406]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 903. [bug] dig should not crash when receiving a TCP packet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of length 0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 902. [bug] The -d option was ignored if both -t and -g were also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 901. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 900. [bug] A config.guess update changed the system identification
cfa64348224b66dd1c9979b809406c4d15b1c137fielding string of FreeBSD systems; configure and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bin/tests/system/ifconfig.sh now recognize the new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0a2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 899. [bug] lib/dns/soa.c failed to compile on many platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to inappropriate use of a void value.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1372, #1373, #1386, #1387, #1395]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 898. [bug] "dig" failed to set a nonzero exit status
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on UDP query timeout. [RT #1323]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 897. [bug] A config.guess update changed the system identification
cfa64348224b66dd1c9979b809406c4d15b1c137fielding string of UnixWare systems; configure now recognizes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the new string.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 896. [bug] If a configuration file is set on named's command line
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and it has a relative pathname, the current directory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (after any possible jailing resulting from named -t)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will be prepended to it so that reloading works
cfa64348224b66dd1c9979b809406c4d15b1c137fielding properly even when a directory option is present.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 895. [func] New function, isc_dir_current(), akin to POSIX's
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 894. [bug] When using the DNSSEC tools, a message intended to warn
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when the keyboard was being used because of the lack
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of a suitable random device was not being printed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 893. [func] Removed isc_file_test() and added isc_file_exists()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for the basic functionality that was being added
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with isc_file_test().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 892. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 891. [bug] Return an error when a SIG(0) signed response to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an unsigned query is seen. This should actually
cfa64348224b66dd1c9979b809406c4d15b1c137fielding do the verification, but it's not currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding possible. [RT #1391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 890. [cleanup] The man pages no longer require the mandoc macros
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and should now format cleanly using most versions of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nroff, and HTML versions of the man pages have been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding added. Both are generated from DocBook source.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 889. [port] Eliminated blank lines before .TH in nroff man
cfa64348224b66dd1c9979b809406c4d15b1c137fielding pages since they cause problems with some versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of nroff. [RT #1390]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 888. [bug] Don't die when using TKEY to delete a nonexistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TSIG key. [RT #1392]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 887. [port] Detect broken compilers that can't call static
cfa64348224b66dd1c9979b809406c4d15b1c137fielding functions from inline functions. [RT #1212]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 886. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 885. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 884. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 883. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 882. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 881. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 880. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 879. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 878. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 877. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 876. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 875. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 874. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 873. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 872. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 871. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 870. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 869. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 868. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 867. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 866. [func] Close debug only file channels when debug is set to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zero. [RT #1246]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 865. [bug] The new configuration parser did not allow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the optional debug level in a "severity debug"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clause of a logging channel to be omitted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This is now allowed and treated as "severity
cfa64348224b66dd1c9979b809406c4d15b1c137fielding debug 1;" like it does in BIND 8.2.4, not as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "severity debug 0;" like it did in BIND 9.1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 864. [cleanup] Multi-threading is now enabled by default on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OSF1, Solaris 2.7 and newer, AIX, IRIX, and HP-UX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 863. [bug] If an error occurred while an outgoing zone transfer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was starting up, the server could access a domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name that had already been freed when logging a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding message saying that the transfer was starting.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 862. [bug] Use after realloc(), non portable pointer arithmetic in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 861. [port] Add support for Mac OS X, by making it equivalent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to Darwin. This was derived from the config.guess
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file shipped with Mac OS X. [RT #1355]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 860. [func] Drop cross class glue in zone transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 859. [bug] Cache cleaning now won't swamp the CPU if there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is a persistent over limit condition.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 858. [func] isc_mem_setwater() no longer requires that when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding callback function is non-NULL then its hi_water
cfa64348224b66dd1c9979b809406c4d15b1c137fielding argument must be greater than its lo_water argument
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (they can now be equal) or that they be non-zero.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 857. [cleanup] Use ISC_MAGIC() to define all magic numbers for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding structs, for our friends in EBCDIC-land.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 856. [func] Allow partial rdatasets to be returned in answer and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding authority sections to help non-TCP capable clients
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recover from truncation. [RT #1301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 855. [bug] Stop spurious "using RFC 1035 TTL semantics" warnings.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 854. [bug] The config parser didn't properly handle config
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options that were specified in units of time other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than seconds. [RT #1372]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 853. [bug] configure_view_acl() failed to detach existing acls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 852. [bug] Handle responses from servers which do not know
cfa64348224b66dd1c9979b809406c4d15b1c137fielding about IXFR.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 851. [cleanup] The obsolete support-ixfr option was not properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 850. [bug] dns_rbt_findnode() would not find nodes that were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding split on a bitstring label somewhere other than in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the last label of the node. [RT #1351]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 848. [func] A minimum max-cache-size of two megabytes is enforced
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by the cache cleaner.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 847. [func] Added isc_file_test(), which currently only has
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some very basic functionality to test for the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding existence of a file, whether a pathname is absolute,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or whether a pathname is the fundamental representation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the current directory. It is intended that this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function can be expanded to test other things a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding programmer might want to know about a file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 846. [func] A non-zero 'param' to dst_key_generate() when making an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hmac-md5 key means that good entropy is not required.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 845. [bug] The access rights on the public file of a symmetric
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key are now restricted as soon as the file is opened,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rather than after it has been written and closed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding just as <lwres/net.h> does.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 843. [func] If no controls statement is present in named.conf,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or if any inet phrase of a controls statement is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lacking a keys clause, then a key will be automatically
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generated by named and an rndc.conf-style file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named named.key will be written that uses it. rndc
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will use this file only if its normal configuration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file, or one provided on the command line, does not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 842. [func] 'rndc flush' now takes an optional view.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 841. [bug] When sdb modules were not declared threadsafe, their
cfa64348224b66dd1c9979b809406c4d15b1c137fielding create and destroy functions were not serialized.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 840. [bug] The config file parser could print the wrong file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name if an error was detected after an included file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was parsed. [RT #1353]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 839. [func] Dump packets for which there was no view or that the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding class could not be determined to category "unmatched".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 838. [port] UnixWare 7.x.x is now suported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 837. [cleanup] Multi-threading is now enabled by default only on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OSF1, Solaris 2.7 and newer, and AIX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 836. [func] Upgraded libtool to 1.4.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 835. [bug] The dispatcher could enter a busy loop if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it got an I/O error receiving on a UDP socket.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 834. [func] Accept (but warn about) master files beginning with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an SOA record without an explicit TTL field and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lacking a $TTL directive, by using the SOA MINTTL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as a default TTL. This is for backwards compatibility
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with old versions of BIND 8, which accepted such
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files without warning although they are illegal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding according to RFC1035.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <dns/soa.h>, and extended them to support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding all the integer-valued fields of the SOA RR.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 832. [bug] The default location for named.conf in named-checkconf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding should depend on --sysconfdir like it does in named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 831. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 830. [func] Implement 'rndc status'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 829. [bug] The DNS_R_ZONECUT result code should only be returned
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when an ANY query is made with DNS_DBFIND_GLUEOK set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding In all other ANY query cases, returning the delegation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 828. [bug] The errno value from recvfrom() could be overwritten
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by logging code. [RT #1293]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 827. [bug] When an IXFR protocol error occurs, the slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding should retry with AXFR.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 826. [bug] Some IXFR protocol errors were not detected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 825. [bug] zone.c:ns_query() detached from the wrong zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reference. [RT #1264]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 824. [bug] Correct line numbers reported by dns_master_load().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 823. [func] The output of "dig -h" now goes to stdout so that it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can easily be piped through "more". [RT #1254]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 822. [bug] Sending nxrrset prerequisites would crash nsupdate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 821. [bug] The program name used when logging to syslog should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be stripped of leading path components.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1178, #1232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 820. [bug] Name server address lookups failed to follow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding A6 chains into the glue of local authoritative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 819. [bug] In certain cases, the resolver's attempts to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding restart an address lookup at the root could cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the fetch to deadlock (with itself) instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding restarting. [RT #1225]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 818. [bug] Certain pathological responses to ANY queries could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause an assertion failure. [RT #1218]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 817. [func] Adjust timeouts for dialup zone queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 816. [bug] Report potential problems with log file accessibility
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at configuration time, since such problems can't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reliably be reported at the time they actually occur.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 815. [bug] If a log file was specified with a path separator
cfa64348224b66dd1c9979b809406c4d15b1c137fielding character (i.e. "/") in its name and the directory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not exist, the log file's name was treated as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding though it were the directory name. [RT #1189]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 814. [bug] Socket objects left over from accept() failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were incorrectly destroyed, causing corruption
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of socket manager data structures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 813. [bug] File descriptors exceeding FD_SETSIZE were handled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding badly. [RT #1192]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 812. [bug] dig sometimes printed incomplete IXFR responses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to an uninitialized variable. [RT #1188]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 811. [bug] Parentheses were not quoted in zone dumps. [RT #1194]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 810. [bug] The signer name in SIG records was not properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down-cased when signing/verifying records. [RT #1186]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 809. [bug] Configuring a non-local address as a transfer-source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause an assertion failure during load.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 808. [func] Add 'rndc flush' to flush the server's cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 807. [bug] When setting up TCP connections for incoming zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transfers, the transfer-source port was not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ignored like it should be.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the calling stack to the zone maintenance level,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing zones to not reload when an included file was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding touched but the top-level zone file was not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 805. [bug] When using "forward only", missing root hints should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not cause queries to fail. [RT #1143]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 804. [bug] Attempting to obtain entropy could fail in some
cfa64348224b66dd1c9979b809406c4d15b1c137fielding situations. This would be most common on systems
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with user-space threads. [RT #1131]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 803. [bug] Treat all SIG queries as if they have the CD bit set,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding otherwise no data will be returned [RT #749]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 802. [bug] DNSSEC key tags were computed incorrectly in almost
cfa64348224b66dd1c9979b809406c4d15b1c137fielding all cases. [RT #1146]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 801. [bug] nsupdate should treat lines beginning with ';' as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding comments. [RT #1139]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 800. [bug] dnssec-signzone produced incorrect statistics for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding large zones. [RT #1133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 799. [bug] The ADB didn't find AAAA glue in a zone unless A6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding glue was also present.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 798. [bug] nsupdate should be able to reject bad input lines
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and continue. [RT #1130]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 797. [func] Issue a warning if the 'directory' option contains
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a relative path. [RT #269]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 796. [func] When a size limit is associated with a log file,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only roll it when the size is reached, not every
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time the log file is opened. [RT #1096]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 795. [func] Add the +multiline option to dig. [RT #1095]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 794. [func] Implement the "port" and "default-port" statements
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 793. [cleanup] The DNSSEC tools could create filenames that were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding illegal or contained shell meta-characters. They
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now use a different text encoding of names that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding doesn't have these problems. [RT #1101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 792. [cleanup] Replace the OMAPI command channel protocol with a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding simpler one.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 791. [bug] The command channel now works over IPv6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 790. [bug] Wildcards created using dynamic update or IXFR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could fail to match. [RT #1111]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 789. [bug] The "localhost" and "localnets" ACLs did not match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when used as the second element of a two-element
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sortlist item.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 788. [func] Add the "match-mapped-addresses" option, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causes IPv6 v4mapped addresses to be treated as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv4 addresses for the purpose of acl matching.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 787. [bug] The DNSSEC tools failed to downcase domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding names when mapping them into file names.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 786. [bug] When DNSSEC signing/verifying data, owner names were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not properly down-cased.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 785. [bug] A race condition in the resolver could cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure. [RT #673, #872, #1048]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 784. [bug] nsupdate and other programs would not quit properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if some signals were blocked by the caller. [RT #1081]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 783. [bug] Following CNAMEs could cause an assertion failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when either using an sdb database or under very
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rare conditions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 782. [func] Implement the "serial-query-rate" option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 781. [func] Avoid error packet loops by dropping duplicate FORMERR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses. [RT #1006]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 780. [bug] Error handling code dealing with out of memory or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding other rare errors could lead to assertion failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by calling functions on uninitialized names. [RT #1065]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 779. [func] Added the "minimal-responses" option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 778. [bug] When starting cache cleaning, cleaning_timer_action()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding returned without first pausing the iterator, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause deadlock. [RT #998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 777. [bug] An empty forwarders list in a zone failed to override
cfa64348224b66dd1c9979b809406c4d15b1c137fielding global forwarders. [RT #995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 776. [func] Improved error reporting in denied messages. [RT #252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 775. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 774. [func] max-cache-size is implemented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 773. [func] Added isc_rwlock_trylock() to attempt to lock without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 772. [bug] Owner names could be incorrectly omitted from cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dumps in the presence of negative caching entries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 771. [cleanup] TSIG errors related to unsynchronized clocks
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are logged better. [RT #919]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 770. [func] Add the "edns yes_or_no" statement to the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clause. [RT #524]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 769. [func] Improved error reporting when parsing rdata. [RT #740]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 768. [bug] The server did not emit an SOA when a CNAME
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or DNAME chain ended in NXDOMAIN in an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding authoritative zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 767. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 766. [bug] A few cases in query_find() could leak fname.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This would trigger the mpctx->allocated == 0
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion when the server exited.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #739, #776, #798, #812, #818, #821, #845,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding #892, #935, #966]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 765. [func] ACL names are once again case insensitive, like
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in BIND 8. [RT #252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 764. [func] Configuration files now allow "include" directives
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in more places, such as inside the "view" statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #377, #728, #860]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 763. [func] Configuration files no longer have reserved words.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #731, #753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 762. [cleanup] The named.conf and rndc.conf file parsers have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been completely rewritten.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 761. [bug] _REENTRANT was still defined when building with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --disable-threads.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 760. [contrib] Significant enhancements to the pgsql sdb driver.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 759. [bug] The resolver didn't turn off "avoid fetches" mode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when restarting, possibly causing resolution
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to fail when it should not. This bug only affected
cfa64348224b66dd1c9979b809406c4d15b1c137fielding platforms which support both IPv4 and IPv6. [RT #927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 758. [bug] The "avoid fetches" code did not treat negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache entries correctly, causing fetches that would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be useful to be avoided. This bug only affected
cfa64348224b66dd1c9979b809406c4d15b1c137fielding platforms which support both IPv4 and IPv6. [RT #927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 757. [func] Log zone transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 756. [bug] dns_zone_load() could "return" success when no master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file was configured.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 755. [bug] Fix incorrectly formatted log messages in zone.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 754. [bug] Certain failure conditions sending UDP packets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause the server to retry the transmission
cfa64348224b66dd1c9979b809406c4d15b1c137fielding indefinitely. [RT #902]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 753. [bug] dig, host, and nslookup would fail to contact a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding remote server if getaddrinfo() returned an IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address on a system that doesn't support IPv6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 752. [func] Correct bad tv_usec elements returned by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gettimeofday().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 751. [func] Log successful zone loads / transfers. [RT #898]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 750. [bug] A query should not match a DNAME whose trust level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is pending. [RT #916]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 749. [bug] When a query matched a DNAME in a secure zone, the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server did not return the signature of the DNAME.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 748. [doc] List supported RFCs in doc/misc/rfc-compliance.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 747. [bug] The code to determine whether an IXFR was possible
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not properly check for a database that could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not have a journal. [RT #865, #908]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 746. [bug] The sdb didn't clone rdatasets properly, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a crash when the server followed delegations. [RT #905]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 745. [func] Report the owner name of records that fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding semantic checks while loading.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result of an ANY or SIG query, the resolver failed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to setup the return event's rdatasets, causing an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion failure in the query code. [RT #881]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 743. [bug] Receiving a large number of certain malformed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding answers could cause named to stop responding.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 742. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 741. [port] Support openssl-engine. [RT #709]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 740. [port] Handle openssl library mismatches slightly better.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 739. [port] Look for /dev/random in configure, rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assuming it will be there for only a predefined
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set of OSes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 738. [bug] If a non-threadsafe sdb driver supported AXFR and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding received an AXFR request, it would deadlock or die
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with an assertion failure. [RT #852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 737. [port] stdtime.c failed to compile on certain platforms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 736. [func] New functions isc_task_{begin,end}exclusive().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 735. [doc] Add BIND 4 migration notes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 734. [bug] An attempt to re-lock the zone lock could occur if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the server was shutdown during a zone transfer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 733. [bug] Reference counts of dns_acl_t objects need to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding locked but were not. [RT #801, #821]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 731. [bug] Certain zone errors could cause named-checkzone to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail ungracefully. [RT #819]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 730. [bug] lwres_getaddrinfo() returns the correct result when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it fails to contact a server. [RT #768]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 729. [port] pthread_setconcurrency() needs to be called on Solaris.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 728. [bug] Fix comment processing on master file directives.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 727. [port] Work around OS bug where accept() succeeds but
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fails to fill in the peer address of the accepted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding connection, by treating it as an error rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure. [RT #809]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 726. [func] Implement the "trace" and "notrace" commands in rndc.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 725. [bug] Installing man pages could fail.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 724. [func] New libisc functions isc_netaddr_any(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_netaddr_any6().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to return DNS_R_SERVFAIL. [RT #783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 722. [func] Allow incremental loads to be canceled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 721. [cleanup] Load manager and dns_master_loadfilequota() are no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 720. [bug] Server could enter infinite loop in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dispatch.c:do_cancel(). [RT #733]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 719. [bug] Rapid reloads could trigger an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #743, #763]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 718. [cleanup] "internal" is no longer a reserved word in named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #753, #731]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 717. [bug] Certain TKEY processing failure modes could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reference an uninitialized variable, causing the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server to crash. [RT #750]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 716. [bug] The first line of a $INCLUDE master file was lost if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an origin was specified. [RT #744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 715. [bug] Resolving some A6 chains could cause an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure in adb.c. [RT #738]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 714. [bug] Preserve interval timers across reloads unless changed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 713. [func] named-checkconf takes '-t directory' similar to named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 712. [bug] Sending a large signed update message caused an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion failure. [RT #718]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 711. [bug] The libisc and liblwres implementations of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inet_ntop contained an off by one error.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 710. [func] The forwarders statement now takes an optional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding port. [RT #418]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 709. [bug] ANY or SIG queries for data with a TTL of 0
cfa64348224b66dd1c9979b809406c4d15b1c137fielding would return SERVFAIL. [RT #620]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 708. [bug] When building with --with-openssl, the openssl headers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding included with BIND 9 should not be used. [RT #702]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 707. [func] The "filename" argument to named-checkzone is no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding longer optional, to reduce confusion. [RT #612]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 706. [bug] Zones with an explicit "allow-update { none; };"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were considered dynamic and therefore not reloaded
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on SIGHUP or "rndc reload".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 705. [port] Work out resource limit type for use where rlim_t is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not available. [RT #695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 704. [port] RLIMIT_NOFILE is not available on all platforms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 703. [port] sys/select.h is needed on older platforms. [RT #695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 702. [func] If the address 0.0.0.0 is seen in resolv.conf,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding use 127.0.0.1 instead. [RT #693]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 701. [func] Root hints are now fully optional. Class IN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding views use compiled-in hints by default, as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before. Non-IN views with no root hints now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding provide authoritative service but not recursion.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding A warning is logged if a view has neither root
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hints nor authoritative data for the root. [RT #696]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 700. [bug] $GENERATE range check was wrong. [RT #688]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 699. [bug] The lexer mishandled empty quoted strings. [RT #694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 698. [bug] Aborting nsupdate with ^C would lead to several
cfa64348224b66dd1c9979b809406c4d15b1c137fielding race conditions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 697. [bug] nsupdate was not compatible with the undocumented
cfa64348224b66dd1c9979b809406c4d15b1c137fielding BIND 8 behavior of ignoring TTLs in "update delete"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding commands. [RT #693]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 696. [bug] lwresd would die with an assertion failure when passed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a zero-length name. [RT #692]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 695. [bug] If the resolver attempted to query a blackholed or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bogus server, the resolution would fail immediately.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 694. [bug] $GENERATE did not produce the last entry.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #682, #683]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 693. [bug] An empty lwres statement in named.conf caused
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the server to crash while loading.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 692. [bug] Deal with systems that have getaddrinfo() but not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gai_strerror(). [RT #679]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 691. [bug] Configuring per-view forwarders caused an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure. [RT #675, #734]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 690. [func] $GENERATE now supports DNAME. [RT #654]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 689. [doc] man pages are now installed. [RT #210]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 688. [func] "make tags" now works on systems with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "Exuberant Ctags" etags.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 687. [bug] Only say we have IPv6, with sufficient functionality,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if it has actually been tested. [RT #586]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 686. [bug] dig and nslookup can now be properly aborted during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding blocking operations. [RT #568]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 685. [bug] nslookup should use the search list/domain options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from resolv.conf by default. [RT #405, #630]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 684. [bug] Memory leak with view forwarders. [RT #656]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 683. [bug] File descriptor leak in isc_lex_openfile().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 682. [bug] nslookup displayed SOA records incorrectly. [RT #665]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 681. [bug] $GENERATE specifying output format was broken. [RT #653]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 680. [bug] dns_rdata_fromstruct() mishandled options bigger
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than 255 octets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 679. [bug] $INCLUDE could leak memory and file descriptors on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reload. [RT #639]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 678. [bug] "transfer-format one-answer;" could trigger an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure. [RT #646]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 677. [bug] dnssec-signzone would occasionally use the wrong ttl
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for database operations and fail. [RT #643]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 676. [bug] Log messages about lame servers to category
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'lame-servers' rather than 'resolver', so as not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be gratuitously incompatible with BIND 8.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 675. [bug] TKEY queries could cause the server to leak
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 674. [func] Allow messages to be TSIG signed / verified using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a offset from the current time.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 673. [func] The server can now convert RFC1886-style recursive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lookup requests into RFC2874-style lookups, when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enabled using the new option "allow-v6-synthesis".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 672. [bug] The wrong time was in the "time signed" field when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding replying with BADTIME error.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 671. [bug] The message code was failing to parse a message with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no question section and a TSIG record. [RT #628]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 670. [bug] The lwres replacements for getaddrinfo and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding getipnodebyname didn't properly check for the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding existence of the sockaddr sa_len field.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 669. [bug] dnssec-keygen now makes the public key file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-world-readable for symmetric keys. [RT #403]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 668. [func] named-checkzone now reports multiple errors in master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 667. [bug] On Linux, running named with the -u option and a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-world-readable configuration file didn't work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 666. [bug] If a request sent by dig is longer than 512 bytes,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 665. [bug] Signed responses were not sent when the size of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TSIG + question exceeded the maximum message size.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 664. [bug] The t_tasks and t_timers module tests are now skipped
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when building without threads, since they require
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 663. [func] Accept a size_spec, not just an integer, in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (unimplemented and ignored) max-ixfr-log-size option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for compatibility with recent versions of BIND 8.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 662. [bug] dns_rdata_fromtext() failed to log certain errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 661. [bug] Certain UDP IXFR requests caused an assertion failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (mpctx->allocated == 0). [RT #355, #394, #623]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 660. [port] Detect multiple CPUs on HP-UX and IRIX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 659. [performance] Rewrite the name compression code to be much faster.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 658. [cleanup] Remove all vestiges of 16 bit global compression.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 657. [bug] When a listen-on statement in an lwres block does not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specify a port, use 921, not 53. Also update the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listen-on documentation. [RT #616]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 656. [func] Treat an unescaped newline in a quoted string as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an error. This means that TXT records with missing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding close quotes should have meaningful errors printed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 655. [bug] Improve error reporting on unexpected eof when loading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones. [RT #611]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 654. [bug] Origin was being forgotten in TCP retries in dig.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 653. [bug] +defname option in dig was reversed in sense.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 652. [bug] zone_saveunique() did not report the new name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 651. [func] The AD bit in responses now has the meaning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified in <draft-ietf-dnsext-ad-is-secure>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 650. [bug] SIG(0) records were being generated and verified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrectly. [RT #606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 649. [bug] It was possible to join to an already running fctx
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after it had "cloned" its events, but before it sent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding them. In this case, the event of the newly joined
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fetch would not contain the answer, and would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger the INSIST() in fctx_sendevents(). In
cfa64348224b66dd1c9979b809406c4d15b1c137fielding BIND 9.0, this bug did not trigger an INSIST(), but
cfa64348224b66dd1c9979b809406c4d15b1c137fielding caused the fetch to fail with a SERVFAIL result.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #588, #597, #605, #607]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 648. [port] Add support for pre-RFC2133 IPv6 implementations.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 647. [bug] Resolver queries sent after following multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding referrals had excessively long retransmission
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timeouts due to incorrectly counting the referrals
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as "restarts".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
cfa64348224b66dd1c9979b809406c4d15b1c137fielding didn't _cleanly_ fix the problem it was trying to fix.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 644. [bug] #622 needed more work. [RT #562]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 643. [bug] xfrin error messages made more verbose, added class
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the zone. [RT# 599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 642. [bug] Break the exit_check() race in the zone module.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.1.0b2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 641. [bug] $GENERATE caused a uninitialized link to be used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 640. [bug] Memory leak in error path could cause
0d24ea1c99d2267096caaf0843c7e5a1ac6b7c0bmjc "mpctx->allocated == 0" failure. [RT #584]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 639. [bug] Reading entropy from the keyboard would sometimes fail.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 638. [port] lib/isc/random.c needed to explicitly include time.h
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to get a prototype for time() when pthreads was not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being used. [RT #592]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 637. [port] Use isc_u?int64_t instead of (unsigned) long long in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be compiled even if the platform does not need it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 636. [port] Shut up MSVC++ about a possible loss of precision
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the ISC__BUFFER_PUTUINT*() macros. [RT #592]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 635. [bug] Reloading a server with a configured blackhole list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding would cause an assertion. [RT #590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 634. [bug] A log file will completely stop being written when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it reaches the maximum size in all cases, not just
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when versioning is also enabled. [RT #570]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 632. [bug] The index array of the journal file was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding corrupted as it was written to disk.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 631. [port] Build without thread support on systems without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 630. [bug] Locking failure in zone code. [RT #582]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 629. [bug] 9.1.0b1 dereferenced a null pointer and crashed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when responding to a UDP IXFR request.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 628. [bug] If the root hints contained only AAAA addresses,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named would be unable to perform resolution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 627. [bug] The EDNS0 blackhole detection code of change 324
cfa64348224b66dd1c9979b809406c4d15b1c137fielding waited for three retransmissions to each server,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which takes much too long when a domain has many
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name servers and all of them drop EDNS0 queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Now we retry without EDNS0 after three consecutive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timeouts, even if they are all from different
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers. [RT #143]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 626. [bug] The lightweight resolver daemon no longer crashes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when asked for a SIG rrset. [RT #558]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 625. [func] Zones now inherit their class from the enclosing view.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 624. [bug] The zone object could get timer events after it had
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been destroyed, causing a server crash. [RT #571]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 623. [func] Added "named-checkconf" and "named-checkzone" program
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for syntax checking named.conf files and zone files,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding respectively.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 622. [bug] A canceled request could be destroyed before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_request_destroy() was called. [RT #562]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 621. [port] Disable IPv6 at runtime if IPv6 sockets are unusable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This mostly affects Red Hat Linux 7.0, which has
cfa64348224b66dd1c9979b809406c4d15b1c137fielding conflicts between libc and the kernel.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 620. [bug] dns_master_load*inc() now require 'task' and 'load'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be non-null. Also 'done' will not be called if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_master_load*inc() fails immediately. [RT #565]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 619. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 618. [bug] Queries to a signed zone could sometimes cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 617. [bug] When using dynamic update to add a new RR to an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding existing RRset with a different TTL, the journal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding entries generated from the update did not include
cfa64348224b66dd1c9979b809406c4d15b1c137fielding explicit deletions and re-additions of the existing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRs to update their TTL to the new value.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 616. [func] dnssec-signzone -t output now includes performance
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 615. [bug] dnssec-signzone did not like child keysets signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by multiple keys.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 614. [bug] Checks for uninitialized link fields were prone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to false positives, causing assertion failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The checks are now disabled by default and may
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be re-enabled by defining ISC_LIST_CHECKINIT.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 613. [bug] "rndc reload zone" now reloads primary zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding It previously only updated slave and stub zones,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if an SOA query indicated an out of date serial.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 612. [cleanup] Shutup a ridiculously noisy HP-UX compiler that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding complains relentlessly about how its treatment
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of 'const' has changed as well as how casting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sometimes tightens alignment constraints.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 611. [func] allow-notify can be used to permit processing of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding notify messages from hosts other than a slave's
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 610. [func] rndc dumpdb is now supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 609. [bug] getrrsetbyname() would crash lwresd if the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found more SIGs than answers. [RT #554]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 608. [func] dnssec-signzone now adds a comment to the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with the time the file was signed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 607. [bug] nsupdate would fail if it encountered a CNAME or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNAME in a response to an SOA query. [RT #515]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 606. [bug] Compiling with --disable-threads failed due
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to isc_thread_self() being incorrectly defined
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as an integer rather than a function.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 605. [func] New function isc_lex_getlasttokentext().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 604. [bug] The named.conf parser could print incorrect line
cfa64348224b66dd1c9979b809406c4d15b1c137fielding numbers when long comments were present.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 603. [bug] Make dig handle multiple types or classes on the same
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query more correctly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 602. [func] Cope automatically with UnixWare's broken
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6_IS_ADDR_* macros. [RT #539]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 601. [func] Return a non-zero exit code if an update fails
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in nsupdate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 600. [bug] Reverse lookups sometimes failed in dig, etc...
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 599. [func] Added four new functions to the libisc log API to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support i18n messages. isc_log_iwrite(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_log_ivwrite(), isc_log_iwrite1() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_log_ivwrite1() were added.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 598. [bug] An update-policy statement would cause the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to assert while loading. [RT #536]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 597. [func] dnssec-signzone is now multi-threaded.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 596. [bug] DNS_RDATASLAB_FORCE and DNS_RDATASLAB_EXACT are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not mutually exclusive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 595. [port] On Linux 2.2, socket() returns EINVAL when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding should return EAFNOSUPPORT. Work around this.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 594. [func] sdb drivers are now assumed to not be thread-safe
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unless the DNS_SDBFLAG_THREADSAFE flag is supplied.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 593. [bug] If a secure zone was missing all its NXTs and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a dynamic update was attempted, the server entered
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an infinite loop.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 592. [bug] The sig-validity-interval option now specifies a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding number of days, not seconds. This matches the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding documentation. [RT #529]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.1.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 591. [bug] Work around non-reentrancy in openssl by disabling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding pre-computation in keys.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 590. [doc] There are now man pages for the lwres library in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 589. [bug] The server could deadlock if a zone was updated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding while being transferred out.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 588. [bug] ctx->in_use was not being correctly initialized when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when pushing a file for $INCLUDE. [RT #523]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 587. [func] A warning is now printed if the "allow-update"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option allows updates based on the source IP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address, to alert users to the fact that this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is insecure and becoming increasingly so as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers capable of update forwarding are being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 586. [bug] multiple views with the same name were fatal. [RT #516]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 585. [func] dns_db_addrdataset() and and dns_rdataslab_merge()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now support 'exact' additions in a similar manner to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_db_subtractrdataset() and dns_rdataslab_subtract().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 584. [func] You can now say 'notify explicit'; to suppress
cfa64348224b66dd1c9979b809406c4d15b1c137fielding notification of the servers listed in NS records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and notify only those servers listed in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'also-notify' option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 583. [func] "rndc querylog" will now toggle logging of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries, like "ndc querylog" in BIND 8.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 582. [bug] dns_zone_idetach() failed to lock the zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #199, #463]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 581. [bug] log severity was not being correctly processed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 580. [func] Ignore trailing garbage on incoming DNS packets,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for interoperability with broken server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementations. [RT #491]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 579. [bug] nsupdate did not take a filename to read update from.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 578. [func] New config option "notify-source", to specify the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source address for notify messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 577. [func] Log illegal RDATA combinations. e.g. multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding singleton types, cname and other data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 576. [doc] isc_log_create() description did not match reality.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 575. [bug] isc_log_create() was not setting internal state
cfa64348224b66dd1c9979b809406c4d15b1c137fielding correctly to reflect the default channels created.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 574. [bug] TSIG signed queries sent by the resolver would fail to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have their responses validated and would leak memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 573. [bug] The journal files of IXFRed slave zones were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inadvertently discarded on server reload, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "journal out of sync with zone" errors on subsequent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reloads. [RT #482]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 572. [bug] Quoted strings were not accepted as key names in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address match lists.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 571. [bug] It was possible to create an rdataset of singleton
cfa64348224b66dd1c9979b809406c4d15b1c137fielding type which had more than one rdata. [RT #154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 570. [bug] rbtdb.c allowed zones containing nodes which had
cfa64348224b66dd1c9979b809406c4d15b1c137fielding both a CNAME and "other data". [RT #154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 569. [func] The DNSSEC AD bit will not be set on queries which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have not requested a DNSSEC response.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 568. [func] Add sample simple database drivers in contrib/sdb.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 567. [bug] Setting the zone transfer timeout to zero caused an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion failure. [RT #302]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 566. [func] New public function dns_timer_setidle().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 565. [func] Log queries more like BIND 8: query logging is now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding done to category "queries", level "info". [RT #169]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 564. [func] Add sortlist support to lwresd.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 563. [func] New public functions dns_rdatatype_format() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdataclass_format(), for convenient formatting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of rdata type/class mnemonics in log messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 562. [cleanup] Moved lib/dns/*conf.c to bin/named where they belong.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 561. [func] The 'datasize', 'stacksize', 'coresize' and 'files'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clauses of the options{} statement are now implemented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 560. [bug] dns_name_split did not properly the resulting prefix
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a maximal length bitstring label was split which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was preceded by another bitstring label. [RT #429]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 559. [bug] dns_name_split did not properly create the suffix
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when splitting within a maximal length bitstring label.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 558. [func] New functions, isc_resource_getlimit and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_resource_setlimit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 557. [func] Symbolic constants for libisc integral types.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 556. [func] The DNSSEC OK bit in the EDNS extended flags
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is now implemented. Responses to queries without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this bit set will not contain any DNSSEC records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 555. [bug] A slave server attempting a zone transfer could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding crash with an assertion failure on certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding malformed responses from the master. [RT #457]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 554. [bug] In some cases, not all of the dnssec tools were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding properly installed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 553. [bug] Incoming zone transfers deferred due to quota
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were not started when quota was increased but
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only when a transfer in progress finished. [RT #456]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 552. [bug] We were not correctly detecting the end of all c-style
cfa64348224b66dd1c9979b809406c4d15b1c137fielding comments. [RT #455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 551. [func] Implemented the 'sortlist' option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 550. [func] Support unknown rdata types and classes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 549. [bug] "make" did not immediately abort the build when a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding subdirectory make failed [RT #450].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 548. [func] The lexer now ungets tokens more correctly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 547. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 546. [func] Option 'lame-ttl' is now implemented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 545. [func] Name limit and counting options removed from dig;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding they didn't work properly, and cannot be correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implemented without significant changes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 544. [func] Add statistics option, enable statistics-file option,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding add RNDC option "dump-statistics" to write out a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query statistics file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 543. [doc] The 'port' option is now documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 542. [func] Add support for update forwarding as required for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding full compliance with RFC2136. It is turned off
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by default and can be enabled using the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'allow-update-forwarding' option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 541. [func] Add bogus server support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 540. [func] Add dialup support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 539. [func] Support the blackhole option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 538. [bug] fix buffer overruns by 1 in lwres_getnameinfo().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 537. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 536. [func] Use transfer-source{-v6} when sending refresh queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Transfer-source{-v6} now take a optional port
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parameter for setting the UDP source port. The port
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parameter is ignored for TCP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 535. [func] Use transfer-source{-v6} when forwarding update
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 534. [func] Ancestors have been removed from RBT chains. Ancestor
cfa64348224b66dd1c9979b809406c4d15b1c137fielding information can be discerned via node parent pointers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 533. [func] Incorporated name hashing into the RBT database to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding improve search speed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 532. [func] Implement DNS UPDATE pseudo records using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS_RDATA_UPDATE flag.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 531. [func] Rdata really should be initialized before being assigned
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to (dns_rdata_fromwire(), dns_rdata_fromtext(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdata_clone(), dns_rdata_fromregion()),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding check that it is.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 530. [func] New function dns_rdata_invalidate().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 529. [bug] 521 contained a bug which caused zones to always
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reload. [RT #410]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 528. [func] The ISC_LIST_XXXX macros now perform sanity checks
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on their arguments. ISC_LIST_XXXXUNSAFE can be use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to skip the checks however use with caution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 527. [func] New function dns_rdata_clone().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 526. [bug] nsupdate incorrectly refused to add RRs with a TTL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 525. [func] New arguments 'options' for dns_db_subtractrdataset(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and 'flags' for dns_rdataslab_subtract() allowing you
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to request that the RR's must exist prior to deletion.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS_R_NOTEXACT is returned if the condition is not met.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 524. [func] The 'forward' and 'forwarders' statement in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-forward zones should work now.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 523. [doc] The source to the Administrator Reference Manual is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now an XML file using the DocBook DTD, and is included
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the distribution. The plain text version of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ARM is temporarily unavailable while we figure out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding how to generate readable plain text from the XML.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 522. [func] The lightweight resolver daemon can now use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a real configuration file, and its functionality
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can be provided by a name server. Also, the -p and -P
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options to lwresd have been reversed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 521. [bug] Detect master files which contain $INCLUDE and always
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reload. [RT #196]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 520. [bug] Upgraded libtool to 1.3.5, which makes shared
cfa64348224b66dd1c9979b809406c4d15b1c137fielding library builds almost work on AIX (and possibly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 519. [bug] dns_name_split() would improperly split some bitstring
cfa64348224b66dd1c9979b809406c4d15b1c137fielding labels, zeroing a few of the least significant bits in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the prefix part. When such an improperly created
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prefix was returned to the RBT database, the bogus
cfa64348224b66dd1c9979b809406c4d15b1c137fielding label was dutifully stored, corrupting the tree.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 518. [bug] The resolver did not realize that a DNAME which was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "the answer" to the client's query was "the answer",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and such queries would fail. [RT #399]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 517. [bug] The resolver's DNAME code would trigger an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if there was more than one DNAME in the chain.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 516. [bug] Cache lookups which had a NULL node pointer, e.g.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding those by dns_view_find(), and which would match a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNAME, would trigger an INSIST(!search.need_cleanup)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion. [RT #399]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 515. [bug] The ssu table was not being attached / detached
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by dns_zone_[sg]etssutable. [RT#397]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 514. [func] Retry refresh and notify queries if they timeout.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 513. [func] New functionality added to rdnc and server to allow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding individual zones to be refreshed or reloaded.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 512. [bug] The zone transfer code could throw an exception with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an invalid IXFR stream.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 511. [bug] The message code could throw an assertion on an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding out of memory failure. [RT #392]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 510. [bug] Remove spurious view notify warning. [RT #376]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 509. [func] Add support for write of zone files on shutdown.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 508. [func] dns_message_parse() can now do a best-effort
cfa64348224b66dd1c9979b809406c4d15b1c137fielding attempt, which should allow dig to print more invalid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 507. [func] New functions dns_zone_flush(), dns_zt_flushanddetach()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and dns_view_flushanddetach().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 506. [func] Do not fail to start on errors in zone files.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 505. [bug] nsupdate was printing "unknown result code". [RT #373]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 504. [bug] The zone was not being marked as dirty when updated via
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 503. [bug] dumptime was not being set along with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS_ZONEFLG_NEEDDUMP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 502. [func] On a SERVFAIL reply, DiG will now try the next server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the list, unless the +fail option is specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 501. [bug] Incorrect port numbers were being displayed by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nslookup. [RT #352]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 500. [func] Nearly useless +details option removed from DiG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 499. [func] In DiG, specifying a class with -c or type with -t
cfa64348224b66dd1c9979b809406c4d15b1c137fielding changes command-line parsing so that classes and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding types are only recognized if following -c or -t.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This allows hosts with the same name as a class or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding type to be looked up.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 498. [doc] There is now a man page for "dig"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 497. [bug] The error messages printed when an IP match list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contained a network address with a nonzero host
cfa64348224b66dd1c9979b809406c4d15b1c137fielding part where not sufficiently detailed. [RT #365]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 496. [bug] named didn't sanity check numeric parameters. [RT #361]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 495. [bug] nsupdate was unable to handle large records. [RT #368]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 494. [func] Do not cache NXDOMAIN responses for SOA queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 493. [func] Return non-cachable (ttl = 0) NXDOMAIN responses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for SOA queries. This makes it easier to locate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the containing zone without polluting intermediate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 492. [bug] attempting to reload a zone caused the server fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to shutdown cleanly. [RT #360]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 491. [bug] nsupdate would segfault when sending certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prerequisites with empty RDATA. [RT #356]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 490. [func] When a slave/stub zone has not yet successfully
cfa64348224b66dd1c9979b809406c4d15b1c137fielding obtained an SOA containing the zone's configured
cfa64348224b66dd1c9979b809406c4d15b1c137fielding retry time, perform the SOA query retries using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exponential backoff. [RT #337]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 489. [func] The zone manager now has a "i/o" queue.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 488. [bug] Locks weren't properly destroyed in some cases.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 487. [port] flockfile() is not defined on all systems.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 486. [bug] nslookup: "set all" and "server" commands showed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the incorrect port number if a port other than 53
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was specified. [RT #352]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 485. [func] When dig had more than one server to query, it would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding send all of the messages at the same time. Add
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rate limiting of the transmitted messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 484. [bug] When the server was reloaded after removing addresses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the named.conf "listen-on" statement, sockets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were still listening on the removed addresses due
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to reference count loops. [RT #325]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 483. [bug] nslookup: "set all" showed a "search" option but it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was not settable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 482. [bug] nslookup: a plain "server" or "lserver" should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding treated as a lookup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 481. [bug] nslookup:get_next_command() stack size could exceed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding per thread limit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 480. [bug] strtok() is not thread safe. [RT #349]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 479. [func] The test suite can now be run by typing "make check"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or "make test" at the top level.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 478. [bug] "make install" failed if the directory specified with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --prefix did not already exist.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 477. [bug] The the isc-config.sh script could be installed before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding its directory was created. [RT #324]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 476. [bug] A zone could expire while a zone transfer was in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding progress triggering a INSIST failure. [RT #329]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 475. [bug] query_getzonedb() sometimes returned a non-null version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on failure. This caused assertion failures when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generating query responses where names subject to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding additional section processing pointed to a zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to which access had been denied by means of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query option. [RT #336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 474. [bug] The mnemonic of the CHAOS class is CH according to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RFC1035, but it was printed and read only as CHAOS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding We now accept both forms as input, and print it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as CH. [RT #305]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 473. [bug] nsupdate overran the end of the list of name servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when no servers could be reached, typically causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it to print the error message "dns_request_create:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not implemented".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 472. [bug] Off-by-one error caused isc_time_add() to sometimes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding produce invalid time values.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 471. [bug] nsupdate didn't compile on HP/UX 10.20
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 470. [func] $GENERATE is now supported. See also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 469. [bug] "query-source address * port 53;" now works.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 468. [bug] dns_master_load*() failed to report file and line
cfa64348224b66dd1c9979b809406c4d15b1c137fielding number in certain error conditions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 467. [bug] dns_master_load*() failed to log an error if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding pushfile() failed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 466. [bug] dns_master_load*() could return success when it failed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 465. [cleanup] Allow 0 to be set as an omapi_value_t value by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding omapi_value_storeint().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 464. [cleanup] Build with openssl's RSA code instead of dnssafe.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 463. [bug] nsupdate sent malformed SOA queries to the second
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and subsequent name servers in resolv.conf if the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query sent to the first one failed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 462. [bug] --disable-ipv6 should work now.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 461. [bug] Specifying an unknown key in the "keys" clause of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "controls" statement caused a NULL pointer dereference.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 460. [bug] Much of the DNSSEC code only worked with class IN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 459. [bug] Nslookup processed the "set" command incorrectly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 458. [bug] Nslookup didn't properly check class and type values.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 457. [bug] Dig/host/hslookup didn't properly handle connect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timeouts in certain situations, causing an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unnecessary warning message to be printed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 456. [bug] Stub zones were not resetting the refresh and expire
cfa64348224b66dd1c9979b809406c4d15b1c137fielding counters, loadtime or clearing the DNS_ZONE_REFRESH
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (refresh in progress) flag upon successful update.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This disabled further refreshing of the stub zone,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing it to eventually expire. [RT #300]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 455. [doc] Document IPv4 prefix notation does not require a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dotted decimal quad but may be just dotted decimal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 454. [bug] Enforce dotted decimal and dotted decimal quad where
cfa64348224b66dd1c9979b809406c4d15b1c137fielding documented as such in named.conf. [RT #304, RT #311]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 453. [bug] Warn if the obsolete option "maintain-ixfr-base"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is specified in named.conf. [RT #306]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 452. [bug] Warn if the unimplemented option "statistics-file"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is specified in named.conf. [RT #301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 451. [func] Update forwarding implemented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 450. [func] New function ns_client_sendraw().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 449. [bug] isc_bitstring_copy() only works correctly if the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding two bitstrings have the same lsb0 value, but this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requirement was not documented, nor was there a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding REQUIRE for it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 448. [bug] Host output formatting change, to match v8. [RT #255]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 447. [bug] Dig didn't properly retry in TCP mode after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a truncated reply. [RT #277]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 446. [bug] Confusing notify log message. [RT #298]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bitstring triggered a REQUIRE statement. The REQUIRE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statement was incorrect. [RT #297]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 444. [func] "recursion denied" messages are always logged at
cfa64348224b66dd1c9979b809406c4d15b1c137fielding debug level 1, now, rather than sometimes at ERROR.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This silences these warnings in the usual case, where
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some clients set the RD bit in all queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 443. [bug] When loading a master file failed because of an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unrecognized RR type name, the error message
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not include the file name and line number.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 442. [bug] TSIG signed messages that did not match any view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding crashed the server. [RT #290]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 441. [bug] Nodes obscured by a DNAME were inaccessible even
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when DNS_DBFIND_GLUEOK was set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 440. [func] New function dns_zone_forwardupdate().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 439. [func] New function dns_request_createraw().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 438. [func] New function dns_message_getrawmessage().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 437. [func] Log NOTIFY activity to the notify channel.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which sometimes happens on Linux, named would enter
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a busy loop. Also, unexpected socket errors were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not logged at a high enough logging level to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding useful in diagnosing this situation. [RT #275]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 435. [bug] dns_zone_dump() overwrote existing zone files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rather than writing to a temporary file and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding renaming. This could lead to empty or partial
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone files being left around in certain error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding conditions involving the initial transfer of a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding slave zone, interfering with subsequent server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding startup. [RT #282]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 434. [func] New function isc_file_isabsolute().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 433. [func] isc_base64_decodestring() now accepts newlines
cfa64348224b66dd1c9979b809406c4d15b1c137fielding within the base64 data. This makes it possible
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to break up the key data in a "trusted-keys"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statement into multiple lines. [RT #284]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 432. [func] Added refresh/retry jitter. The actual refresh/
cfa64348224b66dd1c9979b809406c4d15b1c137fielding retry time is now a random value between 75% and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 100% of the configured value.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 431. [func] Log at ISC_LOG_INFO when a zone is successfully
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 430. [bug] Rewrote the lightweight resolver client management
cfa64348224b66dd1c9979b809406c4d15b1c137fielding code to handle shutdown correctly and general
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 429. [bug] The space reserved for a TSIG record in a response
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was 2 bytes too short, leading to message
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generation failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS_R_BADDB for nodes which had neither NXT nor SIG NXT
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (e.g. glue). This could cause SERVFAILs when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generating negative responses in a secure zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 427. [bug] Avoid going into an infinite loop when the validator
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gets a negative response to a key query where the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records are signed by the missing key.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 426. [bug] Attempting to generate an oversized RSA key could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause dnssec-keygen to dump core.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 425. [bug] Warn about the auth-nxdomain default value change
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if there is no auth-nxdomain statement in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding config file. [RT #287]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 424. [bug] notify_createmessage() could trigger an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure when creating the notify message failed,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding e.g. due to corrupt zones with multiple SOA records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 423. [bug] When responding to a recursive query, errors that occur
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after following a CNAME should cause the query to fail.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 422. [func] get rid of isc_random_t, and make isc_random_get()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and isc_random_jitter() use rand() internally
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of local state. Note that isc_random_*()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding functions are only for weak, non-critical "randomness"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding such as timing jitter and such.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 421. [bug] nslookup would exit when given a blank line as input.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 420. [bug] nslookup failed to implement the "exit" command.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 419. [bug] The certificate type PKIX was misspelled as SKIX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 418. [bug] At debug levels >= 10, getting an unexpected
cfa64348224b66dd1c9979b809406c4d15b1c137fielding socket receive error would crash the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding while trying to log the error message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 417. [func] Add isc_app_block() and isc_app_unblock(), which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow an application to handle signals while
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 416. [bug] Slave zones with no master file tried to use a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NULL pointer for a journal file name when they
cfa64348224b66dd1c9979b809406c4d15b1c137fielding received an IXFR. [RT #273]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 415. [bug] The logging code leaked file descriptors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 414. [bug] Server did not shut down until all incoming zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transfers were finished.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 413. [bug] Notify could attempt to use the zone database after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it had been unloaded. [RT#267]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 412. [bug] named -v didn't print the version.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 411. [bug] A typo in the HS A code caused an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 410. [bug] lwres_gethostbyname() and company set lwres_h_errno
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to a random value on success.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 409. [bug] If named was shut down early in the startup
cfa64348224b66dd1c9979b809406c4d15b1c137fielding process, ns_omapi_shutdown() would attempt to lock
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an uninitialized mutex. [RT #262]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 408. [bug] stub zones could leak memory and reference counts if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding all the masters were unreachable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 407. [bug] isc_rwlock_lock() would needlessly block
cfa64348224b66dd1c9979b809406c4d15b1c137fielding readers when it reached the read quota even
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if no writers were waiting.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 406. [bug] Log messages were occasionally lost or corrupted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to a race condition in isc_log_doit().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 405. [func] Add support for selective forwarding (forward zones)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 404. [bug] The request library didn't completely work with IPv6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 403. [bug] "host" did not use the search list.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 402. [bug] Treat undefined acls as errors, rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding warning and then later throwing an assertion.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 401. [func] Added simple database API.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 400. [bug] SIG(0) signing and verifying was done incorrectly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 399. [bug] When reloading the server with a config file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding containing a syntax error, it could catch an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion failure trying to perform zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding maintenance on, or sending notifies from,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding tentatively created zones whose views were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding never fully configured and lacked an address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding database and request manager.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 398. [bug] "dig" sometimes caught an assertion failure when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using TSIG, depending on the key length.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 397. [func] Added utility functions dns_view_gettsig() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_view_getpeertsig().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 396. [doc] There is now a man page for "nsupdate"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 395. [bug] nslookup printed incorrect RR type mnemonics
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for RRs of type >= 21 [RT #237].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 394. [bug] Current name was not propagated via $INCLUDE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 393. [func] Initial answer while loading (awl) support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Entry points: dns_master_loadfileinc(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_master_loadstreaminc(), dns_master_loadbufferinc().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: calls to dns_master_load*inc() should be rate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be rate limited so as to not use up all file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding descriptors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not support the given address family requested.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 390. [func] The function dns_zone_setdbtype() now takes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an argc/argv style vector of words and sets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding both the zone database type and its arguments,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding making the functions dns_zone_adddbarg()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and dns_zone_cleardbargs() unnecessary.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 389. [bug] Attempting to send a request over IPv6 using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_request_create() on a system without IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support caused an assertion failure [RT #235].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 388. [func] dig and host can now do reverse ipv6 lookups.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 387. [func] Add dns_byaddr_createptrname(), which converts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an address into the name used by a PTR query.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 386. [bug] Missing strdup() of ACL name caused random
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ACL matching failures [RT #228].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and dns_zt_print().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of 2147483647.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 383. [func] When writing a master file, print the SOA and NS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records (and their SIGs) before other records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 382. [bug] named -u failed on many Linux systems where the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding libc provided kernel headers do not match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the current kernel.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 381. [bug] Check for IPV6_RECVPKTINFO and use it instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPV6_PKTINFO if found. [RT #229]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 380. [bug] nsupdate didn't work with IPv6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 379. [func] New library function isc_sockaddr_anyofpf().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 378. [func] named and lwresd will log the command line arguments
cfa64348224b66dd1c9979b809406c4d15b1c137fielding they were started with in the "starting ..." message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 377. [bug] When additional data lookups were refused due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "allow-query", the databases were still being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding attached causing reference leaks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 376. [bug] The server should always use good entropy when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding performing cryptographic functions needing entropy.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 375. [bug] Per-zone "allow-query" did not properly override the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding view/global one for CNAME targets and additional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data [RT #220].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 374. [bug] SOA in authoritative negative responses had wrong TTL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 373. [func] nslookup is now installed by "make install".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 372. [bug] Deal with Microsoft DNS servers appending two bytes of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding garbage to zone transfer requests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 371. [bug] At high debug levels, doing an outgoing zone transfer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of a very large RRset could cause an assertion failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding during logging.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 370. [bug] The error messages for roll-forward failures were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding overly terse.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 369. [func] Support new named.conf options, view and zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statements:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-retry-time, min-retry-time,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-refresh-time, min-refresh-time.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 368. [func] Restructure the internal ".bind" view so that more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones can be added to it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 367. [bug] Allow proper selection of server on nslookup command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 366. [func] Allow use of '-' batch file in dig for stdin.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 365. [bug] nsupdate -k leaked memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 364. [func] Added additional-from-{cache,auth}
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 363. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 362. [bug] rndc no longer aborts if the configuration file is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding missing an options statement. [RT #209]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 361. [func] When the RBT find or chain functions set the name and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding origin for a node that stores the root label
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the name is now set to an empty name, instead of ".",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to simplify later use of the name and origin by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_concatenate(), dns_name_totext() or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_format().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 360. [func] dns_name_totext() and dns_name_format() now allow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an empty name to be passed, which is formatted as "@".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 359. [bug] dnssec-signzone occasionally signed glue records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 358. [cleanup] Rename the intermediate files used by the dnssec
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 357. [bug] The zone file parser crashed if the argument
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to $INCLUDE was a quoted string.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 356. [cleanup] isc_task_send no longer requires event->sender to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be non-null.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 355. [func] Added isc_dir_createunique(), similar to mkdtemp().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 354. [doc] Man pages for the dnssec tools are now included in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the distribution, in doc/man/dnssec.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 353. [bug] double increment in lwres/gethost.c:copytobuf().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 352. [bug] Race condition in dns_client_t startup could cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signed query could crash the server.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 350. [bug] Also-notify lists specified in the global options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding block were not correctly reference counted, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a memory leak.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 349. [bug] Processing a query with the CD bit set now works
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as expected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 348. [func] New boolean named.conf options 'additional-from-auth'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and 'additional-from-cache' now supported in view and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding global options statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 347. [bug] Don't crash if an argument is left off options in dig.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 346. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 345. [bug] Large-scale changes/cleanups to dig:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * Significantly improve structure handling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * Don't pre-load entire batch files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * Fix SIGINT handling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * Shorten timeouts to match v8's behavior
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 344. [bug] When shutting down, lwresd sometimes tried
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to shut down its client tasks twice,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding triggering an assertion.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 343. [bug] Although zone maintenance SOA queries and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding notify requests were signed with TSIG keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when configured for the server in case,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the TSIG was not verified on the response.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 342. [bug] The wrong name was being passed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_dup() when generating a TSIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key using TKEY.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 341. [func] Support 'key' clause in named.conf zone masters
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statement to allow authentication via TSIG keys:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 10.0.0.1 port 5353 key "foo";
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 340. [bug] The top-level COPYRIGHT file was missing from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the distribution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 339. [bug] DNSSEC validation of the response to an ANY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query at a name with a CNAME RR in a secure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone triggered an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 338. [bug] lwresd logged to syslog as named, not lwresd.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 337. [bug] "dig" did not recognize "nsap-ptr" as an RR type
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on the command line.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 336. [bug] "dig -f" used 64 k of memory for each line in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the file. It now uses much less, though still
cfa64348224b66dd1c9979b809406c4d15b1c137fielding proportionally to the file size.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 335. [bug] named would occasionally attempt recursion when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it was disallowed or undesired.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 334. [func] Added hmac-md5 to libisc.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 333. [bug] The resolver incorrectly accepted referrals to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding domains that were not parents of the query name,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing assertion failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 332. [func] New function dns_name_reset().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 331. [bug] Only log "recursion denied" if RD is set. [RT #178]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 330. [bug] Many debugging messages were partially formatted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding even when debugging was turned off, causing a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding significant decrease in query performance.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 329. [func] omapi_auth_register() now takes a size_t argument for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the length of a key's secret data. Previously
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OMAPI only stored secrets up to the first NUL byte.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 328. [func] Added isc_base64_decodestring().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 327. [bug] rndc.conf parser wasn't correctly recognizing an IP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address where a host specification was required.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 326. [func] 'keys' in an 'inet' control statement is now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding required and must have at least one item in it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding A "not supported" warning is now issued if a 'unix'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding control channel is defined.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 325. [bug] isc_lex_gettoken was processing octal strings when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_LEXOPT_CNUMBER was not set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 324. [func] In the resolver, turn EDNS0 off if there is no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response after a number of retransmissions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This is to allow queries some chance of succeeding
cfa64348224b66dd1c9979b809406c4d15b1c137fielding even if all the authoritative servers of a zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding silently discard EDNS0 requests instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sending an error response like they ought to.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 323. [bug] dns_rbt_findname() did not ignore empty rbt nodes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Because of this, servers authoritative for a parent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and grandchild zone but not authoritative for the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding intervening child zone did not correctly issue
cfa64348224b66dd1c9979b809406c4d15b1c137fielding referrals to the servers of the child zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 322. [bug] Queries for KEY RRs are now sent to the parent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server before the authoritative one, making
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSSEC insecurity proofs work in many cases
cfa64348224b66dd1c9979b809406c4d15b1c137fielding where they previously didn't.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 321. [bug] When synthesizing a CNAME RR for a DNAME
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response, query_addcname() failed to initialize
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the type and class of the CNAME dns_rdata_t,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing random failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 320. [func] Multiple rndc changes: parses an rndc.conf file,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding uses authentication to talk to named, command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding line syntax changed. This will all be described
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the ARM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 319. [func] The named.conf "controls" statement is now used
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to configure the OMAPI command channel.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 318. [func] dns_c_ndcctx_destroy() could never return anything
cfa64348224b66dd1c9979b809406c4d15b1c137fielding except ISC_R_SUCCESS; made it have void return instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 317. [func] Use callbacks from libomapi to determine if a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding new connection is valid, and if a key requested
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be used with that connection is valid.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 316. [bug] Generate a warning if we detect an unexpected <eof>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but treat as <eol><eof>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 315. [bug] Handle non-empty blanks lines. [RT #163]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 314. [func] The named.conf controls statement can now have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding more than one key specified for the inet clause.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 313. [bug] When parsing resolv.conf, don't terminate on an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. Instead, parse as much as possible, but
cfa64348224b66dd1c9979b809406c4d15b1c137fielding still return an error if one was found.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 312. [bug] Increase the number of allowed elements in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolv.conf search path from 6 to 8. If there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are more than this, ignore the remainder rather
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than returning a failure in lwres_conf_parse.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 311. [bug] lwres_conf_parse failed when the first line of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolv.conf was empty or a comment.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 310. [func] Changes to named.conf "controls" statement (inet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding subtype only)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - support "keys" clause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inet * port 1024
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow { any; } keys { "foo"; }
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - allow "port xxx" to be left out of statement,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in which case it defaults to omapi's default port
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 309. [bug] When sending a referral, the server did not look
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for name server addresses as glue in the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding holding the NS RRset in the case where this zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was not the same as the one where it looked for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name server addresses as authoritative data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 308. [bug] Treat a SOA record not at top of zone as an error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when loading a zone. [RT #154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 307. [bug] When canceling a query, the resolver didn't check for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_socket_sendto() calls that did not yet have their
cfa64348224b66dd1c9979b809406c4d15b1c137fielding completion events posted, so it could (rarely) end up
cfa64348224b66dd1c9979b809406c4d15b1c137fielding destroying the query context and then want to use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it again when the send event posted, triggering an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion as it tried to cancel an already-canceled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query. [RT #77]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 306. [bug] Reading HMAC-MD5 private key files didn't work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 305. [bug] When reloading the server with a config file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding containing a syntax error, it could catch an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion failure trying to perform zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding maintenance on tentatively created zones whose
cfa64348224b66dd1c9979b809406c4d15b1c137fielding views were never fully configured and lacked
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an address database.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are listed in resolv.conf, silently ignore them
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of returning failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 303. [bug] Add additional sanity checks to differentiate a AXFR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response vs a IXFR response. [RT #157]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 302. [bug] In dig, host, and nslookup, MXNAME should be large
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enough to hold any legal domain name in presentation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding format + terminating NULL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 301. [bug] Uninitialized pointer in host:printmessage(). [RT #159]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on platforms lacking IPv6 because each included their
cfa64348224b66dd1c9979b809406c4d15b1c137fielding own ipv6 header file for the missing definitions. Now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding each library's ipv6.h defines the wrapper symbol of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the other (ISC_IPV6_H and LWRES_IPV6_H).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 299. [cleanup] Get the user and group information before changing the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding root directory, so the administrator does not need to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keep a copy of the user and group databases in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding chroot'ed environment. Suggested by Hakan Olsson.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 298. [bug] A mutex deadlock occurred during shutdown of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interface manager under certain conditions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Digital Unix systems were the most affected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 297. [bug] Specifying a key name that wasn't fully qualified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in certain parts of the config file could cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 296. [bug] "make install" from a separate build directory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed unless configure had been run in the source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding directory, too.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 295. [bug] When invoked with type==CNAME and a message
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not constructed by dns_message_parse(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_message_findname() failed to find anything
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to checking for attribute bits that are set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only in dns_message_parse(). This caused an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding infinite loop when constructing the response to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an ANY query at a CNAME in a secure zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 294. [bug] If we run out of space in while processing glue
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when reading a master file and commit "current name"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reverts to "name_current" instead of staying as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "name_glue".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 293. [port] Add support for FreeBSD 4.0 system tests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 292. [bug] Due to problems with the way some operating systems
cfa64348224b66dd1c9979b809406c4d15b1c137fielding handle simultaneous listening on IPv4 and IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses, the server no longer listens on IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses by default. To revert to the previous
cfa64348224b66dd1c9979b809406c4d15b1c137fielding behavior, specify "listen-on-v6 { any; };" in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the config file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 291. [func] Caching servers no longer send outgoing queries
cfa64348224b66dd1c9979b809406c4d15b1c137fielding over TCP just because the incoming recursive query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was a TCP one.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 290. [cleanup] +twiddle option to dig (for testing only) removed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 289. [cleanup] dig is now installed in $bindir instead of $sbindir.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding host is now installed in $bindir. (Be sure to remove
cfa64348224b66dd1c9979b809406c4d15b1c137fielding any $sbindir/dig from a previous release.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 288. [func] rndc is now installed by "make install" into $sbindir.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 287. [bug] rndc now works again as "rndc 127.1 reload" (for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only that task). Parsing its configuration file and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using digital signatures for authentication has been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding disabled until named supports the "controls" statement,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding post-9.0.0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 286. [bug] On Solaris 2, when named inherited a signal state
cfa64348224b66dd1c9979b809406c4d15b1c137fielding where SIGHUP had the SIG_IGN action, SIGHUP would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be ignored rather than causing the server to reload
cfa64348224b66dd1c9979b809406c4d15b1c137fielding its configuration.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 285. [bug] A change made to the dst API for beta4 inadvertently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding broke OMAPI's creation of a dst key from an incoming
cfa64348224b66dd1c9979b809406c4d15b1c137fielding message, causing an assertion to be triggered. Fixed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 284. [func] The DNSSEC key generation and signing tools now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generate randomness from keyboard input on systems
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 283. [cleanup] The 'lwresd' program is now a link to 'named'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 282. [bug] The lexer now returns ISC_R_RANGE if parsed integer is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding too big for an unsigned long.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 281. [bug] Fixed list of recognized config file category names.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 280. [func] Add isc-config.sh, which can be used to more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding easily build applications that link with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding our libraries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 279. [bug] Private omapi function symbols shared between
cfa64348224b66dd1c9979b809406c4d15b1c137fielding two or more files in libomapi.a were not namespace
cfa64348224b66dd1c9979b809406c4d15b1c137fielding protected using the ISC convention of starting with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the library name and two underscores ("omapi__"...)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 278. [bug] bin/named/logconf.c:category_fromconf() didn't take
cfa64348224b66dd1c9979b809406c4d15b1c137fielding note of when isc_log_categorybyname() wasn't able
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to find the category name and would then apply the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding channel list of the unknown category to all categories.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 277. [bug] isc_log_categorybyname() and isc_log_modulebyname()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding would fail to find the first member of any category
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or module array apart from the internal defaults.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Thus, for example, the "notify" category was improperly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configured by named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 276. [bug] dig now supports maximum sized TCP messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 275. [bug] The definition of lwres_gai_strerror() was missing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the lwres_ prefix.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 274. [bug] TSIG AXFR verify failed when talking to a BIND 8
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 273. [func] The default for the 'transfer-format' option is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now 'many-answers'. This will break zone transfers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to BIND 4.9.5 and older unless there is an explicit
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'one-answer' configuration.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 272. [bug] The sending of large TCP responses was canceled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in mid-transmission due to a race condition
cfa64348224b66dd1c9979b809406c4d15b1c137fielding caused by the failure to set the client object's
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "newstate" variable correctly when transitioning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the "working" state.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 271. [func] Attempt to probe the number of cpus in named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if unspecified rather than defaulting to 1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 270. [func] Allow maximum sized TCP answers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 269. [bug] Failed DNSSEC validations could cause an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure by causing clone_results() to be called with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with hevent->node == NULL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 268. [doc] A plain text version of the Administrator
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Reference Manual is now included in the distribution,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 267. [func] Nsupdate is now provided in the distribution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 266. [bug] zone.c:save_nsrrset() node was not initialized.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 265. [bug] dns_request_create() now works for TCP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 264. [func] Dispatch can not take TCP sockets in connecting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding state. Set DNS_DISPATCHATTR_CONNECTED when calling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_dispatch_createtcp() for connected TCP sockets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or call dns_dispatch_starttcp() when the socket is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 263. [func] New logging channel type 'stderr'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding channel some-name {
cfa64348224b66dd1c9979b809406c4d15b1c137fielding severity error;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 262. [bug] 'master' was not initialized in zone.c:stub_callback().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 261. [func] Add dns_zone_markdirty().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 260. [bug] Running named as a non-root user failed on Linux
cfa64348224b66dd1c9979b809406c4d15b1c137fielding kernels new enough to support retaining capabilities
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after setuid().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 259. [func] New random-device and random-seed-file statements
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for global options block of named.conf. Both accept
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a single string argument.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 258. [bug] Fixed printing of lwres_addr_t.address field.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 257. [bug] The server detached the last zone manager reference
cfa64348224b66dd1c9979b809406c4d15b1c137fielding too early, while it could still be in use by queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This manifested itself as assertion failures during the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding shutdown process for busy name servers. [RT #133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 256. [func] isc_ratelimiter_t now has attach/detach semantics, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_ratelimiter_shutdown guarantees that the rate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding limiter is detached from its task.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 255. [func] New function dns_zonemgr_attach().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 254. [bug] Suppress "query denied" messages on additional data
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.0.0b4 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 253. [func] resolv.conf parser now recognizes ';' and '#' as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding comments (anywhere in line, not just as the beginning).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 252. [bug] resolv.conf parser mishandled masks on sortlists.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding It also aborted when an unrecognized keyword was seen,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now it silently ignores the entire line.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 251. [bug] lwresd caught an assertion failure on startup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 250. [bug] fixed handling of size+unit when value would be too
cfa64348224b66dd1c9979b809406c4d15b1c137fielding large for internal representation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 249. [cleanup] max-cache-size config option now takes a size-spec
cfa64348224b66dd1c9979b809406c4d15b1c137fielding like 'datasize', except 'default' is not allowed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 248. [bug] global lame-ttl option was not being printed when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding config structures were written out.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 247. [cleanup] Rename cache-size config option to max-cache-size.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 246. [func] Rename global option cachesize to cache-size and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding add corresponding option to view statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 245. [bug] If an uncompressed name will take more than 255
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bytes and the buffer is sufficiently long,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_fromwire should return DNS_R_FORMERR,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not ISC_R_NOSPACE. This bug caused cause the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server to catch an assertion failure when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding received a query for a name longer than 255
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 244. [bug] empty named.conf file and empty options statement are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now parsed properly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 243. [func] new cachesize option for named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 242. [cleanup] fixed incorrect warning about auth-nxdomain usage.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 241. [cleanup] nscount and soacount have been removed from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_master_*() argument lists.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 240. [func] databases now come in three flavours: zone, cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 239. [func] If ISC_MEM_DEBUG is enabled, the variable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_mem_debugging controls whether messages
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are printed or not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 238. [cleanup] A few more compilation warnings have been quieted:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding + missing sigwait prototype on BSD/OS 4.0/4.0.1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding + PTHREAD_ONCE_INIT unbraced initializer warnings on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Solaris 2.8.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding + IN6ADDR_ANY_INIT unbraced initializer warnings on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding BSD/OS 4.*, Linux and Solaris 2.8.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 237. [bug] If connect() returned ENOBUFS when the resolver was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding initiating a TCP query, the socket didn't get
cfa64348224b66dd1c9979b809406c4d15b1c137fielding destroyed, and the server did not shut down cleanly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 236. [func] Added new listen-on-v6 config file statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 235. [func] Consider it a config file error if a listen-on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statement has an IPv6 address in it, or a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listen-on-v6 statement has an IPv4 address in it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 234. [bug] Allow a trusted-key's first field (domain-name) be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding either a quoted or an unquoted string, instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requiring a quoted string.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 233. [cleanup] Convert all config structure integer values to unsigned
cfa64348224b66dd1c9979b809406c4d15b1c137fielding integer (isc_uint32_t) to match grammar.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 232. [bug] Allow slave zones to not have a file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 231. [func] Support new 'port' clause in config file options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding section. Causes 'listen-on', 'masters' and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'also-notify' statements to use its value instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding default (53).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 230. [func] Replace the dst sign/verify API with a cleaner one.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 229. [func] Support config file sig-validity-interval statement
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in options, views and zone statements (master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones only).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 228. [cleanup] Logging messages in config module stripped of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trailing period.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 227. [cleanup] The enumerated identifiers dns_rdataclass_*,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rcode_*, dns_opcode_*, and dns_trust_* are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding also now cast to their appropriate types, as with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdatatype_* in item number 225 below.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 226. [func] dns_name_totext() now always prints the root name as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding '.', even when omit_final_dot is true.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 225. [cleanup] The enumerated dns_rdatatype_* identifiers are now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cast to dns_rdatatype_t via macros of their same name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding so that they are of the proper integral type wherever
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a dns_rdatatype_t is needed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 224. [cleanup] The entire project builds cleanly with gcc's
cfa64348224b66dd1c9979b809406c4d15b1c137fielding -Wcast-qual and -Wwrite-strings warnings enabled,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which is now the default when using gcc. (Warnings
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from confparser.c, because of yacc's code, are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unfortunately to be expected.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 223. [func] Several functions were re-prototyped to qualify one
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or more of their arguments with "const". Similarly,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding several functions that return pointers now have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding those pointers qualified with const.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 222. [bug] The global 'also-notify' option was ignored.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 221. [bug] An uninitialized variable was sometimes passed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdata_freestruct() when loading a zone, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 220. [cleanup] Set the default outgoing port in the view, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set it in sockaddrs returned from the ADB.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [31-May-2000 explorer]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 219. [bug] Signed truncated messages more correctly follow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the respective specs.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 218. [func] When an rdataset is signed, its ttl is normalized
cfa64348224b66dd1c9979b809406c4d15b1c137fielding based on the signature validity period.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 217. [func] Also-notify and trusted-keys can now be used in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the 'view' statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 216. [func] The 'max-cache-ttl' and 'max-ncache-ttl' options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 215. [bug] Failures at certain points in request processing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause the assertion INSIST(client->lockview
cfa64348224b66dd1c9979b809406c4d15b1c137fielding == NULL) to be triggered.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 214. [func] New public function isc_netaddr_format(), for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding formatting network addresses in log messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 213. [bug] Don't leak memory when reloading the zone if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an update-policy clause was present in the old zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 212. [func] Added dns_message_get/settsigkey, to make TSIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key management reasonable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 211. [func] The 'key' and 'server' statements can now occur
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inside 'view' statements.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 210. [bug] The 'allow-transfer' option was ignored for slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones, and the 'transfers-per-ns' option was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was ignored for all zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 209. [cleanup] Upgraded openssl files to new version 0.9.5a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 208. [func] Added ISC_OFFSET_MAXIMUM for the maximum value
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of an isc_offset_t.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 207. [func] The dnssec tools properly use the logging subsystem.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 206. [cleanup] dst now stores the key name as a dns_name_t, not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 205. [cleanup] On IRIX, turn off the mostly harmless warnings 1692
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ("prototyped function redeclared without prototype")
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and 1552 ("variable ... set but not used") when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compiling in the lib/dns/sec/{dnssafe,openssl}
cfa64348224b66dd1c9979b809406c4d15b1c137fielding directories, which contain code imported from outside
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to quiet the warnings that "The linked output may not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding run on a PA 1.x system."
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 203. [func] notify and zone soa queries are now tsig signed when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding appropriate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 202. [func] isc_lex_getsourceline() changed from returning int
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to returning unsigned long, the type of its underlying
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 201. [cleanup] Removed the test/sdig program, it has been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.0.0b3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 200. [bug] Failures in sending query responses to clients
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (e.g., running out of network buffers) were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not logged.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 199. [bug] isc_heap_delete() sometimes violated the heap
cfa64348224b66dd1c9979b809406c4d15b1c137fielding invariant, causing timer events not to be posted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 198. [func] Dispatch managers hold memory pools which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding any managed dispatcher may use. This allows
cfa64348224b66dd1c9979b809406c4d15b1c137fielding us to avoid dipping into the memory context for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding most allocations. [19-May-2000 explorer]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 197. [bug] When an incoming AXFR or IXFR completes, the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone's internal state is refreshed from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SOA data. [19-May-2000 explorer]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 196. [func] Dispatchers can be shared easily between views
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and/or interfaces. [19-May-2000 explorer]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 195. [bug] Including the NXT record of the root domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a negative response caused an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 194. [doc] The PDF version of the Administrator's Reference
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Manual is no longer included in the ISC BIND9
cfa64348224b66dd1c9979b809406c4d15b1c137fielding distribution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 193. [func] changed dst_key_free() prototype.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 192. [bug] Zone configuration validation is now done at end
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of config file parsing, and before loading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 191. [func] Patched to compile on UnixWare 7.x. This platform
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not directly supported by the ISC.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 190. [cleanup] The DNSSEC tools have been moved to a separate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding directory dnssec/ and given the following new,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding more descriptive names:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-keygen
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signzone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signkey
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-makekeyset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Their command line arguments have also been changed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be more consistent. dnssec-keygen now prints the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name of the generated key files (sans extension)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on standard output to simplify its use in automated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 189. [func] isc_time_secondsastimet(), a new function, will ensure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that the number of seconds in an isc_time_t does not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exceed the range of a time_t, or return ISC_R_RANGE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Similarly, isc_time_now(), isc_time_nowplusinterval(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_time_add() and isc_time_subtract() now check the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding range for overflow/underflow. In the case of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_time_subtract, this changed a calling requirement
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (ie, something that could generate an assertion)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding into merely a condition that returns an error result.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_time_add() and isc_time_subtract() were void-
cfa64348224b66dd1c9979b809406c4d15b1c137fielding valued before but now return isc_result_t.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 188. [func] Log a warning message when an incoming zone transfer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contains out-of-zone data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 187. [func] isc_ratelimiter_enqueue() has an additional argument
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 186. [func] dns_request_getresponse() has an additional argument
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'preserve_order'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 185. [bug] Fixed up handling of ISC_MEMCLUSTER_LEGACY. Several
cfa64348224b66dd1c9979b809406c4d15b1c137fielding public functions did not have an isc__ prefix, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding referred to functions that had previously been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 184. [cleanup] Variables/functions which began with two leading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding underscores were made to conform to the ANSI/ISO
cfa64348224b66dd1c9979b809406c4d15b1c137fielding standard, which says that such names are reserved.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 183. [func] ISC_LOG_PRINTTAG option for log channels. Useful
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for logging the program name or other identifier.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 182. [cleanup] New command-line parameters for dnssec tools
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 181. [func] Added dst_key_buildfilename and dst_key_parsefilename
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 180. [func] New isc_result_t ISC_R_RANGE. Supersedes DNS_R_RANGE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 179. [func] options named.conf statement *must* now come
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before any zone or view statements.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 178. [func] Post-load of named.conf check verifies a slave zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has non-empty list of masters defined.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 177. [func] New per-zone boolean:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enable-zone yes | no ;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding intended to let a zone be disabled without having
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to comment out the entire zone statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 176. [func] New global and per-view option:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-cache-ttl number
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 175. [func] New global and per-view option:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding additional-data internal | minimal | maximal;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 174. [func] New public function isc_sockaddr_format(), for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding formatting socket addresses in log messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 173. [func] Keep a queue of zones waiting for zone transfer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding quota so that a new transfer can be dispatched
cfa64348224b66dd1c9979b809406c4d15b1c137fielding immediately whenever quota becomes available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 172. [bug] $TTL directive was sometimes missing from dumped
cfa64348224b66dd1c9979b809406c4d15b1c137fielding master files because totext_ctx_init() failed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding initialize ctx->current_ttl_valid.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 171. [cleanup] On NetBSD systems, the mit-pthreads or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unproven-pthreads library is now always used
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unless --with-ptl2 is explicitly specified on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the configure command line. The
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --with-mit-pthreads option is no longer needed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and has been removed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 170. [cleanup] Remove inter server consistency checks from zone,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding these should return as a separate module in 9.1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_zone_checkservers(), dns_zone_checkparents(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_zone_checkchildren(), dns_zone_checkglue().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Remove dns_zone_setadb(), dns_zone_setresolver(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_zone_setrequestmgr() these should now be found
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via the view.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 169. [func] ratelimiter can now process N events per interval.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 168. [bug] include statements in named.conf caused syntax errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to not consuming the semicolon ending the include
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statement before switching input streams.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 167. [bug] Make lack of masters for a slave zone a soft error.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 166. [bug] Keygen was overwriting existing keys if key_id
cfa64348224b66dd1c9979b809406c4d15b1c137fielding conflicted, now it will retry, and non-null keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with key_id == 0 are not generated anymore. Key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was not able to generate NOAUTHCONF DSA key,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding increased RSA key size to 2048 bits.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 165. [cleanup] Silence "end-of-loop condition not reached" warnings
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from Solaris compiler.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 164. [func] Added functions isc_stdio_open(), isc_stdio_close(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_stdio_seek(), isc_stdio_read(), isc_stdio_write(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_stdio_flush(), isc_stdio_sync(), isc_file_remove()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to encapsulate nonportable usage of errno and sync.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 163. [func] Added result codes ISC_R_FILENOTFOUND and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_R_FILEEXISTS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 162. [bug] Ensure proper range for arguments to ctype.h functions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 161. [cleanup] error in yyparse prototype that only HPUX caught.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 160. [cleanup] getnet*() are not going to be implemented at this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 159. [func] Redefinition of config file elements is now an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error (instead of a warning).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 158. [bug] Log channel and category list copy routines
cfa64348224b66dd1c9979b809406c4d15b1c137fielding weren't assigning properly to output parameter.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 157. [port] Fix missing prototype for getopt().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 156. [func] Support new 'database' statement in zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding database "quoted-string";
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 155. [bug] ns_notify_start() was not detaching the found zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 154. [func] The signer now logs libdns warnings to stderr even when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not verbose, and in a nicer format.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 153. [func] dns_rdata_tostruct() 'mctx' is now optional. If 'mctx'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is NULL then you need to preserve the 'rdata' until
cfa64348224b66dd1c9979b809406c4d15b1c137fielding you have finished using the structure as there may be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding references to the associated memory. If 'mctx' is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-NULL it is guaranteed that there are no references
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to memory associated with 'rdata'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdata_freestruct() must be called if 'mctx' was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-NULL and may safely be called if 'mctx' was NULL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 152. [bug] keygen dumped core if domain name argument was omitted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from command line.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 151. [func] Support 'disabled' statement in zone config (causes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone to be parsed and then ignored). Currently must
cfa64348224b66dd1c9979b809406c4d15b1c137fielding come after the 'type' clause.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 150. [func] Support optional ports in masters and also-notify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statements:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 149. [cleanup] Removed unused argument 'olist' from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_c_view_unsetordering().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 148. [cleanup] Stop issuing some warnings about some configuration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file statements that were not implemented, but now are.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 147. [bug] Changed yacc union size to be smaller for yaccs that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding put yacc-stack on the real stack.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 146. [cleanup] More general redundant header file cleanup. Rather
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than continuing to itemize every header which changed,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this changelog entry just notes that if a header file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not need another header file that it was including
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in order to provide its advertised functionality, the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inclusion of the other header file was removed. See
cfa64348224b66dd1c9979b809406c4d15b1c137fielding util/check-includes for how this was tested.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_LANG_ENDDECLS to header files that had function
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prototypes, and removed it from those that did not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 144. [cleanup] libdns header files too numerous to name were made
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to conform to the same style for multiple inclusion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding protection.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 143. [func] Added function dns_rdatatype_isknown().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 142. [cleanup] <isc/stdtime.h> does not need <time.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 141. [bug] Corrupt requests with multiple questions could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 140. [cleanup] <isc/time.h> does not need <time.h> or <isc/result.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 139. [cleanup] <isc/net.h> now includes <isc/types.h> instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 138. [cleanup] isc_strtouq moved from str.[ch] to string.[ch] and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding renamed isc_string_touint64. isc_strsep moved from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding strsep.c to string.c and renamed isc_string_separate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 137. [cleanup] <isc/commandline.h>, <isc/mem.h>, <isc/print.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding made to conform to the same style for multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inclusion protection.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 136. [cleanup] <isc/commandline.h>, <isc/interfaceiter.h>,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 135. [cleanup] Win32's <isc/condition.h> did not need <isc/result.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or <isc/boolean.h>, now uses <isc/types.h> in place
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and ISC_LANG_ENDDECLS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 134. [cleanup] <isc/dir.h> does not need <limits.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 133. [cleanup] <isc/ipv6.h> needs <isc/platform.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 132. [cleanup] <isc/app.h> does not need <isc/task.h>, but does
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 131. [cleanup] <isc/mutex.h> and <isc/util.h> need <isc/result.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for ISC_R_* codes used in macros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 130. [cleanup] <isc/condition.h> does not need <pthread.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of <isc/time.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 129. [bug] The 'default_debug' log channel was not set up when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'category default' was present in the config file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_LANG_ENDDECLS at end of header.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 127. [cleanup] The contracts for the comparison routines
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_fullcompare(), dns_name_compare(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_rdatacompare(), and dns_rdata_compare() now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specify that the order value returned is < 0, 0, or > 0
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of -1, 0, or 1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 126. [cleanup] <isc/quota.h> and <isc/taskpool.h> need <isc/lang.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 125. [cleanup] <isc/eventclass.h>, <isc/ipv6.h>, <isc/magic.h>,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 124. [func] signer now imports parent's zone key signature
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and creates null keys/sets zone status bit for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding children when necessary
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 123. [cleanup] <isc/event.h> does not need <stddef.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 122. [cleanup] <isc/task.h> does not need <isc/mem.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 121. [cleanup] <isc/symtab.h> does not need <isc/mem.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <isc/result.h>. Multiple inclusion protection
cfa64348224b66dd1c9979b809406c4d15b1c137fielding symbol fixed from ISC_SYMBOL_H to ISC_SYMTAB_H.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_symtab_t moved to <isc/types.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 120. [cleanup] <isc/socket.h> does not need <isc/boolean.h>,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 119. [cleanup] structure definitions for generic rdata structures do
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not have _generic_ in their names.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding YACC crust (yyparse, etc) [2000-apr-27 explorer]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 117. [cleanup] libdns.a changes:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_zone_clearnotify() and dns_zone_addnotify()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are replaced by dns_zone_setnotifyalso().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_zone_clearmasters() and dns_zone_addmaster()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are replaced by dns_zone_setmasters().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on Unix systems).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 115. [port] Shut up the -Wmissing-declarations warning about
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 114. [cleanup] <isc/sockaddr.h> does not need <isc/buffer.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 113. [func] Utility programs dig and host added.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 112. [cleanup] <isc/serial.h> does not need <isc/boolean.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 111. [cleanup] <isc/rwlock.h> does not need <isc/result.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 110. [cleanup] <isc/result.h> does not need <isc/boolean.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 109. [bug] "make depend" did nothing for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bin/tests/{db,mem,sockaddr,tasks,timers}/.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 107. [func] Add keysigner and keysettool.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 106. [func] Allow dnssec verifications to ignore the validity
cfa64348224b66dd1c9979b809406c4d15b1c137fielding period. Used by several of the dnssec tools.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 105. [doc] doc/dev/coding.html expanded with other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implicit conventions the developers have used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 104. [bug] Made compress_add and compress_find static to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 103. [func] libisc buffer API changes for <isc/buffer.h>:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_base(b) (pointer)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_current(b) (pointer)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_active(b) (pointer)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_used(b) (pointer)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_length(b) (int)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_usedlength(b) (int)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_consumedlength(b) (int)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_remaininglength(b) (int)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_activelength(b) (int)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_availablelength(b) (int)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_BUFFER_USEDCOUNT(b)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_BUFFER_AVAILABLECOUNT(b)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_type(b)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Changed names:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_used(b, r) ->
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_usedregion(b, r)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_available(b, r) ->
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_available_region(b, r)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_consumed(b, r) ->
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_consumedregion(b, r)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_active(b, r) ->
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_activeregion(b, r)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_remaining(b, r) ->
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_remainingregion(b, r)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Buffer types were removed, so the ISC_BUFFERTYPE_*
cfa64348224b66dd1c9979b809406c4d15b1c137fielding macros are no more, and the type argument to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_init and isc_buffer_allocate were removed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_buffer_putstr is now void (instead of isc_result_t)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and requires that the caller ensure that there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is enough available buffer space for the string.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 102. [port] Correctly detect inet_aton, inet_pton and inet_ptop
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 100. [cleanup] <isc/random.h> does not need <isc/int.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <isc/mutex.h>. isc_random_t moved to <isc/types.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 99. [cleanup] Rate limiter now has separate shutdown() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding destroy() functions, and it guarantees that all
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queued events are delivered even in the shutdown case.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 98. [cleanup] <isc/print.h> does not need <stdarg.h> or <stddef.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unless ISC_PLATFORM_NEEDVSNPRINTF is defined.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 97. [cleanup] <isc/ondestroy.h> does not need <stddef.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 96. [cleanup] <isc/mutex.h> does not need <isc/result.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 95. [cleanup] <isc/mutexblock.h> does not need <isc/result.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 94. [cleanup] Some installed header files did not compile as C++.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 93. [cleanup] <isc/msgcat.h> does not need <isc/result.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 92. [cleanup] <isc/mem.h> does not need <stddef.h>, <isc/boolean.h>,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 91. [cleanup] <isc/log.h> does not need <sys/types.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 89. [cleanup] <isc/lex.h> does not need <stddef.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 88. [cleanup] <isc/interfaceiter.h> does not need <isc/result.h> or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <isc/mem.h>. isc_interface_t and isc_interfaceiter_t
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 87. [cleanup] <isc/heap.h> does not need <isc/boolean.h>,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 85. [cleanup] <isc/bufferlist.h> does not need <isc/buffer.h>,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 84. [func] allow-query ACL checks now apply to all data
cfa64348224b66dd1c9979b809406c4d15b1c137fielding added to a response.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 83. [func] If the server is authoritative for both a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegating zone and its (nonsecure) delegatee, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a query is made for a KEY RR at the top of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegatee, then the server will look for a KEY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the delegator if it is not found in the delegatee.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 82. [cleanup] <isc/buffer.h> does not need <isc/list.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 81. [cleanup] <isc/int.h> and <isc/boolean.h> do not need
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 80. [cleanup] <isc/print.h> does not need <stdio.h> or <stdlib.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 79. [cleanup] <dns/callbacks.h> does not need <stdio.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 78. [cleanup] lwres_conftest renamed to lwresconf_test for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consistency with other *_test programs.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 77. [cleanup] typedef of isc_time_t and isc_interval_t moved from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 76. [cleanup] Rewrote keygen.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 75. [func] Don't load a zone if its database file is older
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than the last time the zone was loaded.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 74. [cleanup] Removed mktemplate.o and ufile.o from libisc.a,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 73. [func] New "file" API in libisc, including new function
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_file_getmodtime, isc_mktemplate renamed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_file_mktemplate and isc_ufile renamed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_file_openunique. By no means an exhaustive API,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it is just what's needed for now.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 72. [func] DNS_RBTFIND_NOPREDECESSOR and DNS_RBTFIND_NOOPTIONS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding added for dns_rbt_findnode, the former to disable the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding setting of the chain to the predecessor, and the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding latter to make clear when no options are set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 71. [cleanup] Made explicit the implicit REQUIREs of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_time_seconds, isc_time_nanoseconds, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_time_subtract.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 70. [func] isc_time_set() added.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 69. [bug] The zone object's master and also-notify lists grew
cfa64348224b66dd1c9979b809406c4d15b1c137fielding longer with each server reload.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 68. [func] Partial support for SIG(0) on incoming messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 67. [performance] Allow use of alternate (compile-time supplied)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 66. [func] Data in authoritative zones should have a trust level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding beyond secure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 65. [cleanup] Removed obsolete typedef of dns_zone_callbackarg_t
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 64. [func] The RBT, DB, and zone table APIs now allow the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding caller find the most-enclosing superdomain of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 63. [func] Generate NOTIFY messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 62. [func] Add UDP refresh support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 61. [cleanup] Use single quotes consistently in log messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 60. [func] Catch and disallow singleton types on message
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 59. [bug] Cause net/host unreachable to be a hard error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when sending and receiving.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 58. [bug] bin/named/query.c could sometimes trigger the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding == 0 assertion in query_newname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 57. [func] Added dns_nxt_typepresent()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 56. [bug] SIG records were not properly returned in cached
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative answers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 55. [bug] Responses containing multiple names in the authority
cfa64348224b66dd1c9979b809406c4d15b1c137fielding section were not negatively cached.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 54. [bug] If a fetch with sigrdataset==NULL joined one with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sigrdataset!=NULL or vice versa, the resolver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could catch an assertion or lose signature data,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding respectively.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 52. [bug] rndc: taskmgr and socketmgr were not initialized
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 51. [cleanup] dns/compress.h and dns/zt.h did not need to include
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns/rbt.h; it was needed only by compress.c and zt.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 50. [func] RBT deletion no longer requires a valid chain to work,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and dns_rbt_deletenode was added.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 49. [func] Each cache now has its own mctx.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 48. [func] isc_task_create() no longer takes an mctx.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_task_mem() has been eliminated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 47. [func] A number of modules now use memory context reference
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 46. [func] Memory contexts are now reference counted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Added isc_mem_inuse() and isc_mem_preallocate().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Renamed isc_mem_destroy_check() to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_mem_setdestroycheck().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 45. [bug] The trusted-key statement incorrectly loaded keys.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 44. [bug] Don't include authority data if it would force us
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to unset the AD bit in the message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 43. [bug] DNSSEC verification of cached rdatasets was failing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 42. [cleanup] Simplified logging of messages with embedded domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding names by introducing a new convenience function
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_format().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 41. [func] Use PR_SET_KEEPCAPS on Linux 2.3.99-pre3 and later
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to allow 'named' to run as a non-root user while
cfa64348224b66dd1c9979b809406c4d15b1c137fielding retaining the ability to bind() to privileged
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 40. [func] Introduced new logging category "dnssec" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding logging module "dns/validator".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 39. [cleanup] Moved the typedefs for isc_region_t, isc_textregion_t,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and isc_lex_t to <isc/types.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 38. [bug] TSIG signed incoming zone transfers work now.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 37. [bug] If the first RR in an incoming zone transfer was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not an SOA, the server died with an assertion failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of just reporting an error.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 36. [cleanup] Change DNS_R_SUCCESS (and others) to ISC_R_SUCCESS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 35. [performance] Log messages which are of a level too high to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding logged by any channel in the logging configuration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will not cause the log mutex to be locked.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 34. [bug] Recursion was allowed even with 'recursion no'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 33. [func] The RBT now maintains a parent pointer at each node.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 32. [cleanup] bin/lwresd/client.c needs <string.h> for memset()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 30. [func] config file grammar change to support optional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding class type for a view.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 29. [func] support new config file view options:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding auth-nxdomain recursion query-source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query-source-v6 transfer-source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transfer-source-v6 max-transfer-time-out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-transfer-idle-out transfer-format
cfa64348224b66dd1c9979b809406c4d15b1c137fielding request-ixfr provide-ixfr cleaning-interval
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fetch-glue notify rfc2308-type1 lame-ttl
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-ncache-ttl min-roots
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 28. [func] support lame-ttl, min-roots and serial-queries
cfa64348224b66dd1c9979b809406c4d15b1c137fielding config global options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 27. [bug] Only include <netinet6/in6.h> on BSD/OS 4.[01]*.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Including it on other platforms (eg, NetBSD) can
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause a forced #error from the C preprocessor.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 26. [func] new match-clients statement in config file view.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 25. [bug] make install failed to install <isc/log.h> and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 24. [cleanup] Eliminate some unnecessary #includes of header
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files from header files.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 23. [cleanup] Provide more context in log messages about client
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requests, using a new function ns_client_log().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 22. [bug] SIGs weren't returned in the answer section when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the query resulted in a fetch.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 21. [port] Look at STD_CINCLUDES after CINCLUDES during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compilation, so additional system include directories
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can be searched but header files in the bind9 source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding tree with conflicting names take precedence. This
cfa64348224b66dd1c9979b809406c4d15b1c137fielding avoids issues with installed versions of dnssafe and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 20. [func] Configuration file post-load validation of zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed if there were no zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 19. [bug] dns_zone_notifyreceive() failed to unlock the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lock in certain error cases.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 18. [bug] Use AC_TRY_LINK rather than AC_TRY_COMPILE in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configure.in to check for presence of in6addr_any.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 17. [func] Do configuration file post-load validation of zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 16. [bug] put quotes around key names on config file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding output to avoid possible keyword clashes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 15. [func] Add dns_name_dupwithoffsets(). This function is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding improves comparison performance for duped names.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 14. [bug] free_rbtdb() could have 'put' unallocated memory in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an unlikely error path.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 13. [bug] lib/dns/master.c and lib/dns/xfrin.c didn't ignore
cfa64348224b66dd1c9979b809406c4d15b1c137fielding out-of-zone data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 12. [bug] Fixed possible uninitialized variable error.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 11. [bug] axfr_rrstream_first() didn't check the result code of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding db_rr_iterator_first(), possibly causing an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be triggered later.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 10. [bug] A bug in the code which makes EDNS0 OPT records in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger an assertion.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 9. [cleanup] replaced bit-setting code in confctx.c and replaced
cfa64348224b66dd1c9979b809406c4d15b1c137fielding repeated code with macro calls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 8. [bug] Shutdown of incoming zone transfer accessed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding freed memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 7. [cleanup] removed 'listen-on' from view statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 6. [bug] quote RR names when generating config file to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prevent possible clash with config file keywords
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (such as 'key').
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 5. [func] syntax change to named.conf file: new ssu grant/deny
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statements must now be enclosed by an 'update-policy'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 4. [port] bin/named/unix/os.c didn't compile on systems with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding linux 2.3 kernel includes due to conflicts between
cfa64348224b66dd1c9979b809406c4d15b1c137fielding C library includes and the kernel includes. We now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding get only what we need from <linux/capability.h>, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding avoid pulling in other linux kernel .h files.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 3. [bug] TKEYs go in the answer section of responses, not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the additional section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 2. [bug] Generating cryptographic randomness failed on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding systems without /dev/random.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 1. [bug] The installdirs rule in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lib/isc/unix/include/isc/Makefile.in had a typo which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prevented the isc directory from being created if it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding didn't exist.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.0.0b2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding# This tells Emacs to use hard tabs in this file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding# Local Variables:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding# indent-tabs-mode: t